CVE-2026-18230
HighCVSS 8.1Exploitation Probability (EPSS)
Low risk12th percentile - higher than 12% of all known CVEs
Summary
The WP Directory Kit WordPress plugin before 1.5.6 does not sanitize and escape a parameter before using it in a SQL statement through one of its authenticated AJAX actions, which lacks an authorization check, allowing any authenticated user such as a Subscriber to perform SQL injection attacks.
Risk Assessment
A low-privileged authenticated user can manipulate SQL queries, potentially leading to data leakage, database modification, or privilege escalation.
Recommendation
Update the WP Directory Kit plugin to version 1.5.6 or later. Add authorization checks to AJAX actions and properly sanitize parameters.
Original NVD description (English source)
The WP Directory Kit WordPress plugin before 1.5.6 does not sanitise and escape a parameter before using it in a SQL statement through one of its authenticated AJAX actions, which lacks an authorization check, allowing any authenticated user such as a Subscriber to perform SQL injection attacks.