Skip to content
Threat Feed
Subscribe

Vendor

DirectoryPress

1 brief RSS
high advisory

DirectoryPress WordPress Plugin Vulnerable to SQL Injection (CVE-2026-3489)

The DirectoryPress WordPress plugin before 3.6.26 is vulnerable to unauthenticated SQL Injection via the 'packages' parameter, allowing attackers to extract sensitive database information.

DirectoryPress +1 wordpress sql-injection cve-2026-3489
2r 1t 1c