WP Directory Kit
WPDirectoryKit
Developer
1.6.1
Latest version
2,000
Installations
No date
Last updated
Vulnerability history
0 present
38 patched
21 Mitigation rules
- Unauthenticated SQL Injection vulnerability<= 1.6.01 day ago
- Authenticated (Subscriber+) SQL Injection vulnerability<= 1.5.909/10/2026
- Authenticated (Custom+) SQL Injection vulnerability<= 1.5.429/09/2026
- Listing Admin+ Stored XSS vulnerability< 1.5.826/09/2026
- Authenticated (Custom+) SQL Injection vulnerability<= 1.5.415/09/2026
- Editor+ SQL Injection vulnerability<= 1.5.715/09/2026
- Contributor+ Non-Public Listing Field Disclosure vulnerability<= 1.6.015/09/2026
- Unauthenticated Unpublished Listing Disclosure vulnerability<= 1.5.915/09/2026
- Subscriber+ Plugin Settings and API Key Disclosure vulnerability< 1.5.527/08/2026
- Subscriber+ Contact Message and User Data Disclosure vulnerability< 1.5.527/08/2026
- Subscriber+ User and Unpublished Listing Disclosure vulnerability< 1.5.527/08/2026
- Unauthenticated User Email Disclosure via select_2_ajax_user vulnerability< 1.5.721/08/2026
- Admin+ SQL Injection via section Parameter vulnerability< 1.5.720/08/2026
- Subscriber+ SQL Injection via section Parameter vulnerability< 1.5.618/08/2026
- Unauthenticated SQL Injection via search_location and search_category vulnerability< 1.5.618/08/2026
- SQL Injection vulnerability<= 1.5.412/08/2026
- SQL Injection vulnerability<= 1.5.411/08/2026
- SQL Injection vulnerability<= 1.5.114/05/2026
- SQL Injection vulnerability<= 1.5.013/04/2026
- Broken Access Control vulnerability<= 1.5.008/04/2026
- Unauthenticated Email Exposure via wdk_public_action vulnerability<= 1.4.927/01/2026
- Unauthenticated SQL Injection vulnerability<= 1.4.716/12/2025
- Authentication Bypass to Privilege Escalation via Account Takeover vulnerability1.4.0-1.4.403/12/2025
- Authenticated (Admin+) SQL Injection vulnerability<= 1.4.601/12/2025
- Reflected Cross-Site Scripting via 'order_by' Parameter vulnerability<= 1.4.527/11/2025
- Unauthenticated SQL Injection via select_2_ajax() Function vulnerability<= 1.4.321/11/2025
- Broken Access Control vulnerability<= 1.4.026/09/2025
- Reflected Cross Site Scripting (XSS) vulnerability<= 1.3.504/07/2024
- HTML Injection vulnerability<= 1.3.626/06/2024
- Authenticated (Subscriber+) SQL Injection vulnerability<= 1.3.005/04/2024
- Reflected Cross Site Scripting (XSS) vulnerability<= 1.2.925/03/2024
- Broken Access Control vulnerability<= 1.2.605/09/2023
- Unauthenticated Local File Inclusion vulnerability< 1.2.022/06/2023
- Missing Authorization to Plugin Settings Change/Delete, Demo Import, Directory Kit Deletion via wdk_admin_action vulnerability<= 1.2.313/06/2023
- Reflected Cross-Site Scripting via 'search' vulnerability<= 1.2.302/06/2023
- Multiple Cross-Site Request Forgery vulnerability<= 1.2.104/05/2023
- Multiple Missing Authorization vulnerability<= 1.2.204/05/2023
- Open Redirection vulnerability<= 1.1.927/04/2023