CVE Catalog
CVE-2026-39531
CriticalCVSS 9.3Exploitation Probability (EPSS)
Low risk0.24%
16th percentile - higher than 16% of all known CVEs
Summary
The WP Directory Kit plugin for WordPress up to version 1.5.0 is vulnerable to blind SQL injection. An attacker can send malicious SQL queries through improperly sanitized input parameters.
Risk Assessment
Risk includes leakage of sensitive database data such as user passwords or configuration details, and potential takeover of the website.
Recommendation
Update the WP Directory Kit plugin to a version above 1.5.0 or apply the available security patch.
Original NVD description (English source)
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Wp Directory Kit WP Directory Kit allows Blind SQL Injection. This issue affects WP Directory Kit: from n/a through 1.5.0.