CVE-2026-28001

Unauthenticated SQL Injection in WP Directory Kit = 1.5.4 versions...

CVE-2026-27538

Unauthenticated SQL Injection in WP Directory Kit = 1.5.4 versions...

CVE-2026-28001

Unauthenticated SQL Injection in WP Directory Kit = 1.5.4 versions...

CVE-2026-28001

The CVE-2026-28001 entry concerns the WP Directory Kit WordPress plugin, affected versions

CVE-2026-28001 WordPress WP Directory Kit plugin <= 1.5.4 - SQL Injection vulnerability

Unauthenticated SQL Injection in WP Directory Kit = 1.5.4 versions...

CVE-2026-28001 WordPress WP Directory Kit plugin <= 1.5.4 - SQL Injection vulnerability

Unauthenticated SQL Injection in WP Directory Kit = 1.5.4 versions...

EUVD-2026-57941

Unauthenticated SQL Injection in WP Directory Kit = 1.5.4 versions...

CVE-2026-27538 WordPress WP Directory Kit plugin <= 1.5.4 - SQL Injection vulnerability

Unauthenticated SQL Injection in WP Directory Kit = 1.5.4 versions...

EUVD-2026-57936

Unauthenticated SQL Injection in WP Directory Kit = 1.5.4 versions...

CVE-2026-27538

CVE-2026-27538 affects the WordPress WP Directory Kit plugin up to version 1.5.4, with an unauthenticated SQL injection vulnerability. The underlying root cause, affected files/components, and exact exploitation flow are not detailed in the provided documents. CVSS 3.1 base score is 7.5 (HIGH) wi...

CVE-2026-27538 WordPress WP Directory Kit plugin <= 1.5.4 - SQL Injection vulnerability

Unauthenticated SQL Injection in WP Directory Kit = 1.5.4 versions...

CVE-2026-28001: Improper Neutralization of Special Elements used in an SQL Command

Unauthenticated SQL Injection in WP Directory Kit = 1.5.4 versions...

CVE-2026-27538: Improper Neutralization of Special Elements used in an SQL Command

Unauthenticated SQL Injection in WP Directory Kit = 1.5.4 versions...

PT-2026-71501

Unauthenticated SQL Injection in WP Directory Kit = 1.5.4 versions...

PT-2026-71506

Unauthenticated SQL Injection in WP Directory Kit = 1.5.4 versions...

MAL-2026-13927 Malicious code in svelte-kit-vim (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb45cf2ae29595bdddd78ba81f4798842b6caf4cefd8abfcbad23f1eb812c3be The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-13915 Malicious code in kit-map-vim (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 03873a12af48745e3fd5173ce736267aebd3290be427275073562b8e1ada61fc On import of kit-map-vim, dist/index.mjs unconditionally spawns dist/internal/calc-math.dat as a detached child process after a SHA-256 self-check...

Malicious code in kit-map-vim (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 03873a12af48745e3fd5173ce736267aebd3290be427275073562b8e1ada61fc On import of kit-map-vim, dist/index.mjs unconditionally spawns dist/internal/calc-math.dat as a detached child process after a SHA-256 self-check...

WordPress WP Directory Kit plugin <= 1.5.4 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Jayant Kamble in WordPress Plugin WP Directory Kit versions = 1.5.4...

CVE-2026-18474

The WP Directory Kit WordPress plugin before 1.5.6 does not sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by unauthenticated users when a non-default search field type is configured...