CVE-2026-18473

Affected product: WP Directory Kit WordPress plugin prior to 1.5.5. Vulnerable component: parameter handling in field_search where input is unsafely used in a SQL statement. Root cause: insufficient sanitisation/escaping leading to SQL injection. Impact: unauthenticated attackers can exploit the ...