Skip to content
Threat Feed
Subscribe

Product

WP Directory Kit (<= 1.6.0)

1 brief RSS
high advisory

WP Directory Kit: SQL injection in idfield parameter (CVE-2026-109197)

The WP Directory Kit WordPress plugin is vulnerable to unauthenticated SQL injection via the idfield parameter due to insufficient input sanitization, enabling potential data exfiltration.

WP Directory Kit wordpress sql-injection web-application
1t 1c