WP Directory Kit

Güvenlik açıkları

• CVE-2025-13390kimlik doğrulamasız≤ 1.4.4

  WP Directory Kit <= 1.4.4 - Authentication Bypass to Privilege Escalation via Account Takeover

  Kritik 9.8

• CVE-2023-41875kimlik doğrulamasız≤ 1.2.6

  WordPress WP Directory Kit plugin <= 1.2.6 - Broken Access Control vulnerability

  Kritik 9.8

• CVE-2023-2278kimlik doğrulamasız≤ 1.1.9

  WP Directory Kit <= 1.1.9 - Unauthenticated Local File Inclusion via wdk_public_action

  Kritik 9.8

• CVE-2026-28001kimlik doğrulamasız≤ 1.5.4

  WordPress WP Directory Kit plugin <= 1.5.4 - SQL Injection vulnerability

  Kritik 9.3

• CVE-2026-42672kimlik doğrulamasız≤ 1.5.1

  WordPress WP Directory Kit plugin <= 1.5.1 - SQL Injection vulnerability

  Kritik 9.3

• CVE-2026-39531kimlik doğrulamasız≤ 1.5.0

  WordPress WP Directory Kit plugin <= 1.5.0 - SQL Injection vulnerability

  Kritik 9.3

• CVE-2024-3217abone+≤ 1.3.0

  WP Directory Kit <= 1.3.0 - Authenticated (Subscriber+) SQL Injection

  Yüksek 8.8

• CVE-2026-27538kimlik doğrulamasız≤ 1.5.4

  WordPress WP Directory Kit plugin <= 1.5.4 - SQL Injection vulnerability

  Yüksek 7.5

• CVE-2026-39534kimlik doğrulamasız≤ 1.5.0

  WordPress WP Directory Kit plugin <= 1.5.0 - Broken Access Control vulnerability

  Yüksek 7.5

• CVE-2025-13089kimlik doğrulamasız≤ 1.4.7

  WP Directory Kit <= 1.4.7 - Unauthenticated SQL Injection

  Yüksek 7.5

• CVE-2025-13138kimlik doğrulamasız≤ 1.4.3

  WP Directory Kit <= 1.4.3 - Unauthenticated SQL Injection via select_2_ajax() Function

  Yüksek 7.5

• CVE-2025-13525kimlik doğrulamasız · tıklama gerekir≤ 1.4.5

  WP Directory Kit <= 1.4.5 - Reflected Cross-Site Scripting via 'order_by' Parameter

  Orta 6.1

• CVE-2024-37487kimlik doğrulamasız · tıklama gerekir≤ 1.3.5

  WordPress WP Directory Kit plugin <= 1.3.5 - Reflected Cross Site Scripting (XSS) vulnerability

  Orta 6.1

• CVE-2024-29774kimlik doğrulamasız · tıklama gerekir≤ 1.2.9

  WordPress WP Directory Kit plugin <= 1.2.9 - Reflected Cross Site Scripting (XSS) vulnerability

  Orta 6.1

• CVE-2023-31229kimlik doğrulamasız · tıklama gerekir≤ 1.1.9

  WordPress WP Directory Kit Plugin <= 1.1.9 is vulnerable to Open Redirection

  Orta 6.1

• CVE-2023-2835kimlik doğrulamasız · tıklama gerekir≤ 1.2.3

  WP Directory Kit <= 1.2.3 - Reflected Cross-Site Scripting via 'search'

  Orta 6.1

• CVE-2023-2279kimlik doğrulamasız · tıklama gerekir≤ 1.2.1

  WP Directory Kit <= 1.2.1 - Cross-Site Request Forgery to Plugin Settings Change/Delete, Demo Import, Directory Kit Modification/Deletion via admin_page_display

  Orta 5.4

• CVE-2025-13920kimlik doğrulamasız≤ 1.4.9

  WP Directory Kit <= 1.4.9 - Unauthenticated Email Exposure via wdk_public_action

  Orta 5.3

• CVE-2025-60120kimlik doğrulamasız≤ 1.4.0

  WordPress WP Directory Kit plugin <= 1.4.0 - Broken Access Control vulnerability

  Orta 5.3

• CVE-2023-2280kimlik doğrulamasız≤ 1.2.2

  WP Directory Kit <= 1.2.2 - Missing Authorization to Plugin Installation, Settings Change/Delete, Demo Import, Directory Kit Deletion via wdk_public_action

  Orta 5.3

• CVE-2025-13090yönetici≤ 1.4.6

  WP Directory Kit <= 1.4.6 - Authenticated (Admin+) SQL Injection

  Orta 4.9

• CVE-2023-2277kimlik doğrulamasız · tıklama gerekir≤ 1.1.9

  WP Directory Kit <= 1.1.9 - Cross-Site Request Forgery to Stored Cross-Site Scripting via wdk_resultitem

  Orta 4.7

• CVE-2023-2351abone+≤ 1.2.3

  WP Directory Kit <= 1.2.3 - Missing Authorization to Plugin Settings Change/Delete, Demo Import, Directory Kit Deletion via wdk_admin_action

  Orta 4.3

• CVE-2024-37253yüksek yetki≤ 1.3.6

  WordPress WPDirectoryKit plugin <= 1.3.6 - HTML Injection vulnerability

  Düşük 2.7