CVE-2026-27538

HighCVSS 7.5

Published: 13/08/2026(UTC)Updated: 14/08/2026(UTC)Translated: 13/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.25%

16th percentile - higher than 16% of all known CVEs

Unauthenticated SQL Injection in WP Directory Kit versions up to 1.5.4. An attacker can manipulate database queries without authentication.

Risk of data leakage, modification or deletion of data, and in extreme cases server compromise.

Update the WP Directory Kit plugin to the latest version that includes the security fix.

Original NVD description (English source)

Unauthenticated SQL Injection in WP Directory Kit <= 1.5.4 versions.