CPE

Cpe:2.3:a:wp_directory_kit_project:wp_directory_kit:::*:::wordpress::

1 brief RSS

WP Directory Kit: SQL injection in idfield parameter (CVE-2026-109197)

The WP Directory Kit WordPress plugin is vulnerable to unauthenticated SQL injection via the idfield parameter due to insufficient input sanitization, enabling potential data exfiltration.

WP Directory Kit wordpress sql-injection web-application

1t 1c 2h ago

Cpe:2.3:a:wp_directory_kit_project:wp_directory_kit:*:*:*:*:*:wordpress:*:*

WP Directory Kit: SQL injection in idfield parameter (CVE-2026-109197)

Cpe:2.3:a:wp_directory_kit_project:wp_directory_kit:::*:::wordpress::