CVE-2026-28001

CriticalCVSS 9.3

Published: 13/08/2026(UTC)Updated: 13/08/2026(UTC)Translated: 13/08/2026(UTC)NVD NIST

Summary

SQL Injection vulnerability in WP Directory Kit versions up to 1.5.4 allows an unauthenticated attacker to inject malicious SQL code.

An attacker can access the database, steal data, or modify website content.

Update the WP Directory Kit plugin to a version that includes a fix for this vulnerability.

Original NVD description (English source)

Unauthenticated SQL Injection in WP Directory Kit <= 1.5.4 versions.