[ Vendor · 2 CVEs ]
wpdirectorykit
CVEs affecting wpdirectorykit published in the last 30 days, plus any wpdirectorykit CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-96653 | 10 Oct 2026 | CVSS 6.5 | wpdirectorykit WP Directory KitThe WP Directory Kit plugin for WordPress is vulnerable to time-based SQL Injection via 'display_name' Profile Field (Second-Order) in all versions… | |
| CVE-2026-16596 | 30 Sep 2026 | CVSS 6.5 | wpdirectorykit WP Directory KitThe WP Directory Kit plugin for WordPress is vulnerable to generic SQL Injection via the 'data_fields_list' parameter in all versions up to, and… |