CVE-2026-18474
HighCVSS 8.6Exploitation Probability (EPSS)
Low risk20th percentile - higher than 20% of all known CVEs
Summary
The WP Directory Kit WordPress plugin before 1.5.6 does not sanitize and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by unauthenticated users when a non-default search field type is configured.
Risk Assessment
An unauthenticated attacker can manipulate SQL queries, potentially leading to data leakage, database modification, or full site compromise.
Recommendation
Update the WP Directory Kit plugin to version 1.5.6 or later. Ensure all parameters are properly sanitized and escaped.
Original NVD description (English source)
The WP Directory Kit WordPress plugin before 1.5.6 does not sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by unauthenticated users when a non-default search field type is configured.