agentprime: wpdirectorykit-wp-directory-kitEvery new CVE for wpdirectorykit-wp-directory-kit.https://agentprime.io/CVE-2026-109197: WP Directory Kit <= 1.6.0 - Unauthenticated SQL Injection via 'idfield' Parameterhttps://agentprime.io/advisories/CVE-2026-109197/https://agentprime.io/advisories/CVE-2026-109197/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Sat, 31 Oct 2026 09:29:26 GMTCVECVE-2026-96653: WP Directory Kit <= 1.5.9 - Authenticated (Subscriber+) SQL Injection via 'display_name' Profile Field (Second-Order)https://agentprime.io/advisories/CVE-2026-96653/https://agentprime.io/advisories/CVE-2026-96653/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 10 Oct 2026 07:41:46 GMTCVECVE-2026-16596: WP Directory Kit <= 1.5.4 - Authenticated (Custom+) SQL Injection via 'data_fields_list' Parameterhttps://agentprime.io/advisories/CVE-2026-16596/https://agentprime.io/advisories/CVE-2026-16596/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 30 Sep 2026 07:41:07 GMTCVECVE-2026-16588: WP Directory Kit <= 1.5.4 - Authenticated (Custom+) SQL Injection via 'order_by' Parameterhttps://agentprime.io/advisories/CVE-2026-16588/https://agentprime.io/advisories/CVE-2026-16588/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 16 Sep 2026 03:28:18 GMTCVECVE-2026-28001: WordPress WP Directory Kit plugin <= 1.5.4 - SQL Injection vulnerabilityhttps://agentprime.io/advisories/CVE-2026-28001/https://agentprime.io/advisories/CVE-2026-28001/CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Thu, 13 Aug 2026 13:36:22 GMTCVEcriticalCVE-2026-27538: WordPress WP Directory Kit plugin <= 1.5.4 - SQL Injection vulnerabilityhttps://agentprime.io/advisories/CVE-2026-27538/https://agentprime.io/advisories/CVE-2026-27538/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 13 Aug 2026 13:36:19 GMTCVECVE-2025-13920: WP Directory Kit <= 1.4.9 - Unauthenticated Email Exposure via wdk_public_actionhttps://agentprime.io/advisories/CVE-2025-13920/https://agentprime.io/advisories/CVE-2025-13920/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 24 Jan 2026 12:27:15 GMTCVECVE-2025-13089: WP Directory Kit <= 1.4.7 - Unauthenticated SQL Injectionhttps://agentprime.io/advisories/CVE-2025-13089/https://agentprime.io/advisories/CVE-2025-13089/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Sat, 13 Dec 2025 03:20:26 GMTCVECVE-2025-13090: WP Directory Kit <= 1.4.6 - Authenticated (Admin+) SQL Injectionhttps://agentprime.io/advisories/CVE-2025-13090/https://agentprime.io/advisories/CVE-2025-13090/CVSS 4.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 02 Dec 2025 11:20:06 GMTCVECVE-2025-13525: WP Directory Kit <= 1.4.5 - Reflected Cross-Site Scripting via 'order_by' Parameterhttps://agentprime.io/advisories/CVE-2025-13525/https://agentprime.io/advisories/CVE-2025-13525/CVSS 6.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 27 Nov 2025 05:31:56 GMTCVECVE-2025-13138: WP Directory Kit <= 1.4.3 - Unauthenticated SQL Injection via select_2_ajax() Functionhttps://agentprime.io/advisories/CVE-2025-13138/https://agentprime.io/advisories/CVE-2025-13138/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 21 Nov 2025 09:26:59 GMTCVECVE-2025-60120: WordPress WP Directory Kit plugin <= 1.4.0 - Broken Access Control vulnerabilityhttps://agentprime.io/advisories/CVE-2025-60120/https://agentprime.io/advisories/CVE-2025-60120/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 26 Sep 2025 08:31:35 GMTCVECVE-2024-37253: WordPress WPDirectoryKit plugin <= 1.3.6 - HTML Injection vulnerabilityhttps://agentprime.io/advisories/CVE-2024-37253/https://agentprime.io/advisories/CVE-2024-37253/CVSS 2.7 (Low). Published by the CVE Program. Not analysed by agentprime yet.Tue, 09 Jul 2024 10:05:21 GMTCVECVE-2024-3217: WP Directory Kit <= 1.3.0 - Authenticated (Subscriber+) SQL Injectionhttps://agentprime.io/advisories/CVE-2024-3217/https://agentprime.io/advisories/CVE-2024-3217/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 05 Apr 2024 07:34:35 GMTCVECVE-2024-29774: WordPress WP Directory Kit plugin <= 1.2.9 - Reflected Cross Site Scripting (XSS) vulnerabilityhttps://agentprime.io/advisories/CVE-2024-29774/https://agentprime.io/advisories/CVE-2024-29774/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 27 Mar 2024 12:54:20 GMTCVECVE-2023-2279: WP Directory Kit <= 1.2.1 - Cross-Site Request Forgery to Plugin Settings Change/Delete, Demo Import, Directory Kit Modification/Deletion via admin_page_displayhttps://agentprime.io/advisories/CVE-2023-2279/https://agentprime.io/advisories/CVE-2023-2279/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 31 Aug 2023 05:33:12 GMTCVECVE-2023-2278: WP Directory Kit <= 1.1.9 - Unauthenticated Local File Inclusion via wdk_public_actionhttps://agentprime.io/advisories/CVE-2023-2278/https://agentprime.io/advisories/CVE-2023-2278/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Tue, 13 Jun 2023 01:48:07 GMTCVEcriticalCVE-2023-2277: WP Directory Kit <= 1.1.9 - Cross-Site Request Forgery to Stored Cross-Site Scripting via wdk_resultitemhttps://agentprime.io/advisories/CVE-2023-2277/https://agentprime.io/advisories/CVE-2023-2277/CVSS 6.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 13 Jun 2023 01:48:06 GMTCVECVE-2023-2351: WP Directory Kit <= 1.2.3 - Missing Authorization to Plugin Settings Change/Delete, Demo Import, Directory Kit Deletion via wdk_admin_actionhttps://agentprime.io/advisories/CVE-2023-2351/https://agentprime.io/advisories/CVE-2023-2351/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 13 Jun 2023 01:48:06 GMTCVECVE-2023-2280: WP Directory Kit <= 1.2.2 - Missing Authorization to Plugin Installation, Settings Change/Delete, Demo Import, Directory Kit Deletion via wdk_public_actionhttps://agentprime.io/advisories/CVE-2023-2280/https://agentprime.io/advisories/CVE-2023-2280/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 09 Jun 2023 05:33:26 GMTCVECVE-2023-2835: WP Directory Kit <= 1.2.3 - Reflected Cross-Site Scripting via 'search'https://agentprime.io/advisories/CVE-2023-2835/https://agentprime.io/advisories/CVE-2023-2835/CVSS 6.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 02 Jun 2023 06:06:47 GMTCVE