Login Request a demo
WP
Vendor
wpdirectorykit
2 products with CVEs on record
26
CVEs
0
On KEV
2
New 30D
Products
WD
WP Directory Kit
wpdirectorykit
9.8
24 CVEs0 on KEV2 new
SE
Sweet Energy Efficiency
wpdirectorykit
7.1
2 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-96653
WD
WP Directory Kit
wpdirectorykit
6.5
0%
Oct 10WP Directory Kit <= 1.5.9 - Authenticated (Subscriber+) SQL Injection via 'display_name' Profile Field (Second-Order)
CVE-2026-16596
WD
WP Directory Kit
wpdirectorykit
6.5
0%
Sep 30WP Directory Kit <= 1.5.4 - Authenticated (Custom+) SQL Injection via 'data_fields_list' Parameter
CVE-2026-16588
WD
WP Directory Kit
wpdirectorykit
6.5
0%
Sep 16WP Directory Kit <= 1.5.4 - Authenticated (Custom+) SQL Injection via 'order_by' Parameter
CVE-2026-28001
WD
WP Directory Kit
WPDirectoryKit
9.3
0%
Aug 13WordPress WP Directory Kit plugin <= 1.5.4 - SQL Injection vulnerability
CVE-2026-27538
WD
WP Directory Kit
WPDirectoryKit
7.5
0%
Aug 13WordPress WP Directory Kit plugin <= 1.5.4 - SQL Injection vulnerability
CVE-2025-13920
WD
WP Directory Kit
wpdirectorykit
5.3
1%
Jan 24WP Directory Kit <= 1.4.9 - Unauthenticated Email Exposure via wdk_public_action
CVE-2025-14618
SE
Sweet Energy Efficiency
wpdirectorykit
4.3
0%
Dec 18Sweet Energy Efficiency <= 1.0.6 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Graph Deletion
CVE-2025-13089
WD
WP Directory Kit
wpdirectorykit
7.5
0%
Dec 13WP Directory Kit <= 1.4.7 - Unauthenticated SQL Injection
CVE-2025-13390
WD
WP Directory Kit
Wpdirectorykit
9.8
5%
Dec 3WP Directory Kit <= 1.4.4 - Authentication Bypass to Privilege Escalation via Account Takeover
CVE-2025-13090
WD
WP Directory Kit
wpdirectorykit
4.9
0%
Dec 2WP Directory Kit <= 1.4.6 - Authenticated (Admin+) SQL Injection
CVE-2025-13525
WD
WP Directory Kit
wpdirectorykit
6.1
0%
Nov 27WP Directory Kit <= 1.4.5 - Reflected Cross-Site Scripting via 'order_by' Parameter
CVE-2025-13138
WD
WP Directory Kit
wpdirectorykit
7.5
2%
Nov 21WP Directory Kit <= 1.4.3 - Unauthenticated SQL Injection via select_2_ajax() Function
CVE-2025-60120
WD
WP Directory Kit
WPDirectoryKit
5.3
0%
Sep 26WordPress WP Directory Kit plugin <= 1.4.0 - Broken Access Control vulnerability
CVE-2025-58262
SE
Sweet Energy Efficiency
WPDirectoryKit
7.1
0%
Sep 22WordPress Sweet Energy Efficiency plugin <= 1.0.8 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2023-41875
WD
WP Directory Kit
Wpdirectorykit
9.8
1%
Dec 13WordPress WP Directory Kit plugin <= 1.2.6 - Broken Access Control vulnerability
CVE-2024-37487
WD
WP Directory Kit
Wpdirectorykit
6.1
0%
Jul 21Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in wpdirectorykit.Com WP Directory Kit allows Reflected XSS.This issue…
CVE-2024-37253
WD
WP Directory Kit
Wpdirectorykit
2.7
0%
Jul 9Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') vulnerability in WpDirectoryKit WP Directory Kit allows Code Injection.This…
CVE-2024-3217
WD
WP Directory Kit
Wpdirectorykit
8.8
2%
Apr 5The WP Directory Kit plugin for WordPress is vulnerable to SQL Injection via the 'attribute_value' and 'attribute_id' parameters in all versions up to, and including, 1.3.0 due to…
CVE-2024-29774
WD
WP Directory Kit
Wpdirectorykit
6.1
0%
Mar 27Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WpDirectoryKit WP Directory Kit allows Reflected XSS.This issue affects WP…
CVE-2023-31229
WD
WP Directory Kit
Wpdirectorykit
6.1
0%
Dec 29URL Redirection to Untrusted Site ('Open Redirect') vulnerability in WP Directory Kit.This issue affects WP Directory Kit: from n/a through 1.1.9
CVE-2023-2279
WD
WP Directory Kit
Wpdirectorykit
5.4
0%
Aug 31The WP Directory Kit plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.2.1
CVE-2023-2351
WD
WP Directory Kit
Wpdirectorykit
4.3
1%
Jun 13The WP Directory Kit plugin for WordPress is vulnerable to unauthorized modification of data and loss of data due to a missing capability check on the 'ajax_admin' function in…
CVE-2023-2278
WD
WP Directory Kit
Wpdirectorykit
9.8
2%
Jun 13The WP Directory Kit plugin for WordPress is vulnerable to Local File Inclusion in versions up to, and including, 1.1.9 via the 'wdk_public_action' function
CVE-2023-2277
WD
WP Directory Kit
Wpdirectorykit
4.7
0%
Jun 13The WP Directory Kit plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.1.9
CVE-2023-2280
WD
WP Directory Kit
Wpdirectorykit
5.3
1%
Jun 9The WP Directory Kit plugin for WordPress is vulnerable to unauthorized modification of data and loss of data due to a missing capability check on the 'ajax_public' function in…
CVE-2023-2835
WD
WP Directory Kit
Wpdirectorykit
6.1
1%
Jun 2The WP Directory Kit plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'search' parameter in versions up to, and including, 1.2.3 due to insufficient…