Skip to content

CVE record · 1 source

CVE-2026-109197

CVSS 7.5

The WP Directory Kit plugin for WordPress is vulnerable to generic SQL Injection via the 'idfield' parameter in all versions up to, and including…

Vendor: Wpdirectorykit
Product: WP Directory Kit
CVSS v3.1: 7.5 AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Weakness: CWE-89
Exposure class: Web platform

Coverage

1

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

30

CVE NVD 22h ago

The WP Directory Kit plugin for WordPress is vulnerable to generic SQL Injection via the 'idfield' parameter in all versions up to, and including…

The WP Directory Kit plugin for WordPress is vulnerable to generic SQL Injection via the 'idfield' parameter in all versions up to, and including, 1.6.0 due to insufficient escaping on the user supplied parameter and lack of…

CVSS 7.5 CVE-2026-109197 Wpdirectorykit