agentprime: wp-directory-kitEvery new CVE for wp-directory-kit.https://agentprime.io/CVE-2026-118420: WP Directory Kit < 1.6.3 - Listing Admin+ SQL Injection via 'main_field' Parameterhttps://agentprime.io/advisories/CVE-2026-118420/https://agentprime.io/advisories/CVE-2026-118420/Published by the CVE Program. Not analysed by agentprime yet.Wed, 11 Nov 2026 06:00:08 GMTCVECVE-2026-118418: WP Directory Kit < 1.6.3 - Unauthenticated User Data and Contact Message Disclosurehttps://agentprime.io/advisories/CVE-2026-118418/https://agentprime.io/advisories/CVE-2026-118418/Published by the CVE Program. Not analysed by agentprime yet.Wed, 11 Nov 2026 06:00:08 GMTCVECVE-2026-16591: WP Directory Kit < 1.5.8 - Listing Admin+ Stored XSS via Category and Location Title and Icon Fieldshttps://agentprime.io/advisories/CVE-2026-16591/https://agentprime.io/advisories/CVE-2026-16591/CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Sat, 26 Sep 2026 06:00:18 GMTCVECVE-2026-18232: WP Directory Kit <= 1.5.7 - Unauthenticated Unpublished Listing Disclosure via map_infowindowhttps://agentprime.io/advisories/CVE-2026-18232/https://agentprime.io/advisories/CVE-2026-18232/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 15 Sep 2026 06:00:08 GMTCVECVE-2026-16592: WP Directory Kit <= 1.5.7 - Contributor+ Non-Public Listing Field Disclosure via Shortcodeshttps://agentprime.io/advisories/CVE-2026-16592/https://agentprime.io/advisories/CVE-2026-16592/CVSS 2.7 (Low). Published by the CVE Program. Not analysed by agentprime yet.Tue, 15 Sep 2026 06:00:08 GMTCVECVE-2026-16593: WP Directory Kit <= 1.5.7 - Editor+ SQL Injection via Elementor Category and Location Widget Settingshttps://agentprime.io/advisories/CVE-2026-16593/https://agentprime.io/advisories/CVE-2026-16593/CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 15 Sep 2026 06:00:08 GMTCVECVE-2026-18231: WP Directory Kit < 1.5.7 - Unauthenticated User Email Disclosure via select_2_ajax_userhttps://agentprime.io/advisories/CVE-2026-18231/https://agentprime.io/advisories/CVE-2026-18231/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 19 Aug 2026 06:00:18 GMTCVECVE-2026-18653: WP Directory Kit < 1.5.7 - Admin+ SQL Injection via section Parameterhttps://agentprime.io/advisories/CVE-2026-18653/https://agentprime.io/advisories/CVE-2026-18653/CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Sun, 16 Aug 2026 06:00:15 GMTCVECVE-2026-18474: WP Directory Kit < 1.5.6 - Unauthenticated SQL Injection via search_location and search_categoryhttps://agentprime.io/advisories/CVE-2026-18474/https://agentprime.io/advisories/CVE-2026-18474/CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 12 Aug 2026 06:00:17 GMTCVECVE-2026-18230: WP Directory Kit < 1.5.6 - Subscriber+ SQL Injection via section Parameterhttps://agentprime.io/advisories/CVE-2026-18230/https://agentprime.io/advisories/CVE-2026-18230/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 12 Aug 2026 06:00:17 GMTCVECVE-2026-18473: WP Directory Kit < 1.5.5 - Unauthenticated SQL Injection via 'field_search' Parameterhttps://agentprime.io/advisories/CVE-2026-18473/https://agentprime.io/advisories/CVE-2026-18473/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Sun, 09 Aug 2026 06:00:13 GMTCVEcriticalCVE-2026-16595: WP Directory Kit < 1.5.5 - Subscriber+ User and Unpublished Listing Disclosurehttps://agentprime.io/advisories/CVE-2026-16595/https://agentprime.io/advisories/CVE-2026-16595/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 08 Aug 2026 06:00:12 GMTCVECVE-2026-16594: WP Directory Kit < 1.5.5 - Subscriber+ Plugin Settings and API Key Disclosurehttps://agentprime.io/advisories/CVE-2026-16594/https://agentprime.io/advisories/CVE-2026-16594/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Sat, 08 Aug 2026 06:00:12 GMTCVECVE-2026-16590: WP Directory Kit < 1.5.5 - Subscriber+ Contact Message and User Data Disclosurehttps://agentprime.io/advisories/CVE-2026-16590/https://agentprime.io/advisories/CVE-2026-16590/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 08 Aug 2026 06:00:12 GMTCVECVE-2026-16589: WP Directory Kit < 1.5.5 - Subscriber+ SQL Injection via data_fields_list Parameterhttps://agentprime.io/advisories/CVE-2026-16589/https://agentprime.io/advisories/CVE-2026-16589/CVSS 7.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Sat, 08 Aug 2026 06:00:12 GMTCVECVE-2026-39534: WordPress WP Directory Kit plugin <= 1.5.0 - Broken Access Control vulnerabilityhttps://agentprime.io/advisories/CVE-2026-39534/https://agentprime.io/advisories/CVE-2026-39534/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 15 Jun 2026 20:18:06 GMTCVECVE-2026-42672: WordPress WP Directory Kit plugin <= 1.5.1 - SQL Injection vulnerabilityhttps://agentprime.io/advisories/CVE-2026-42672/https://agentprime.io/advisories/CVE-2026-42672/CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Mon, 01 Jun 2026 15:27:46 GMTCVEcriticalCVE-2026-39531: WordPress WP Directory Kit plugin <= 1.5.0 - SQL Injection vulnerabilityhttps://agentprime.io/advisories/CVE-2026-39531/https://agentprime.io/advisories/CVE-2026-39531/CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Thu, 21 May 2026 15:08:24 GMTCVEcriticalCVE-2023-31229: WordPress WP Directory Kit Plugin <= 1.1.9 is vulnerable to Open Redirectionhttps://agentprime.io/advisories/CVE-2023-31229/https://agentprime.io/advisories/CVE-2023-31229/CVSS 4.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 29 Dec 2023 09:53:39 GMTCVE