Advisories · Technology

Sarah Giles Dynamic User Directory.

Every CVE that names Sarah Giles Dynamic User Directory among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-42719 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

WordPress Dynamic User Directory plugin <= 2.4 - PHP Object Injection vulnerability
- Sarah Giles Dynamic User Directory
- Insecure deserialization
Not analysed yet 10 Oct 2026
CVE-2026-42720 CVE record

CVSS 7.6 High

WordPress Dynamic User Directory plugin <= 2.4 - SQL Injection vulnerability
- Sarah Giles Dynamic User Directory
- SQL injection
Not analysed yet 7 Oct 2026
CVE-2025-62982 CVE record

CVSS 5.9 Medium

WordPress Dynamic User Directory plugin <= 2.3 - Cross Site Scripting (XSS) vulnerability
- Sarah Giles Dynamic User Directory
- Cross-site scripting (XSS)
Not analysed yet 27 Oct 2025