112 matches found
WP Directory Kit <= 1.4.4 - Authentication Bypass
The WP Directory Kit plugin for WordPress version 1.4.4 and below contains an authentication bypass vulnerability in its auto-login functionality. The vulnerability allows unauthenticated attackers to gain administrative access by exploiting a cryptographically weak token generation mechanism tha...
CVE-2025-13390
WP Directory Kit = 1.4.4 - Omisión de Autenticación para Escalada de Privilegios mediante Toma de Cuenta Resumen El plugin WP Directory Kit para WordPress versión 1.4.4 y anteriores contiene una omisión de autenticación en su funcionalidad de inicio de sesión automático. La vulnerabilidad permite...
CVE-2024-3217-POC
CVE-2024-3217-POC Mitre 説明 WordPress用プラグイン「WP Directory Kit」は、バージョン1.3.0（およびそれを含む全バージョン）において、ユーザーが指定するパラメータ'attributevalue'および'attributeid'に対するエスケープ処理が不十分で、既存のSQLクエリの準備が不足しているため、SQLインジェクションに対して脆弱です。これにより、認証を受けた攻撃者（最低でもサブスクライバーレベルのアクセス権限を持つユーザー）が、既存のクエリに追加のSQLクエリを付加し、データベースから機密情報を抽出することが可能になります。 解...
CVE-2025-13390
CVE-2025-13390 WP Directory Kit Das WP Directory Kit Plugin für WordPress ist in allen Versionen bis einschließlich 1.4.4 anfällig für eine Authentifizierungsumgehung, die auf eine fehlerhafte Implementierung des Authentifizierungsalgorithmus in der Funktionwdkgenerateautologinlink zurückzuführen...
CVE-2026-18231
The WP Directory Kit WordPress plugin before 1.5.7 does not perform any authorization check on one of its public AJAX actions and returns unfiltered database rows, allowing unauthenticated attackers to retrieve the usernames and email addresses of users holding the WP Directory Kit WordPress plug...
EUVD-2026-62279
The WP Directory Kit WordPress plugin before 1.5.7 does not perform any authorization check on one of its public AJAX actions and returns unfiltered database rows, allowing unauthenticated attackers to retrieve the usernames and email addresses of users holding the WP Directory Kit WordPress plug...
CVE-2026-18231 WP Directory Kit < 1.5.7 - Unauthenticated User Email Disclosure via select_2_ajax_user
The WP Directory Kit WordPress plugin before 1.5.7 does not perform any authorization check on one of its public AJAX actions and returns unfiltered database rows, allowing unauthenticated attackers to retrieve the usernames and email addresses of users holding the WP Directory Kit WordPress plug...
CVE-2026-18231
The WP Directory Kit WordPress plugin (versions before 1.5.7 ) is vulnerable to unauthenticated user data disclosure. The root cause is a missing authorization check on the select_2_ajax_user public AJAX action, which returns unfiltered database rows. An unauthenticated attacker can exploit this ...
CVE-2026-18653
The WP Directory Kit WordPress plugin before 1.5.7 does not sanitise and escape a parameter before using it in a SQL statement, allowing administrators to perform SQL injection attacks. On a multisite installation this lets an administrator of a single site read data belonging to the entire...
CVE-2026-18653
The WP Directory Kit WordPress plugin (versions before 1.5.7) passes the "section" parameter unsanitized into a SQL query, enabling authenticated admins to perform SQL injection. On multisite installs, a single-site admin can read data belonging to the entire network. No active exploitation is re...
CVE-2026-18653
The WP Directory Kit WordPress plugin before 1.5.7 does not sanitise and escape a parameter before using it in a SQL statement, allowing administrators to perform SQL injection attacks. On a multisite installation this lets an administrator of a single site read data belonging to the entire...
CVE-2026-18653 WP Directory Kit < 1.5.7 - Admin+ SQL Injection via section Parameter
The WP Directory Kit WordPress plugin before 1.5.7 does not sanitise and escape a parameter before using it in a SQL statement, allowing administrators to perform SQL injection attacks. On a multisite installation this lets an administrator of a single site read data belonging to the entire...
EUVD-2026-59912
The WP Directory Kit WordPress plugin before 1.5.7 does not sanitise and escape a parameter before using it in a SQL statement, allowing administrators to perform SQL injection attacks. On a multisite installation this lets an administrator of a single site read data belonging to the entire...
CVE-2026-28001
Unauthenticated SQL Injection in WP Directory Kit = 1.5.4 versions...
CVE-2026-27538
Unauthenticated SQL Injection in WP Directory Kit = 1.5.4 versions...
CVE-2026-28001
Unauthenticated SQL Injection in WP Directory Kit = 1.5.4 versions...
CVE-2026-28001
The CVE-2026-28001 entry concerns the WP Directory Kit WordPress plugin, affected versions
CVE-2026-28001 WordPress WP Directory Kit plugin <= 1.5.4 - SQL Injection vulnerability
Unauthenticated SQL Injection in WP Directory Kit = 1.5.4 versions...