Browse CVEs

CRITICAL 9.8 CVE-2025-13390 The WP Directory Kit plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 1.4.4 due to incorrect impleme… Wp Directory Kit after 1.4.4 Fix from $2,3002025-12-03 CRITICAL 9.8 CVE-2023-41875 Missing Authorization vulnerability in wpdirectorykit.com WP Directory Kit allows Exploiting Incorrectly Configured Access Control Security Levels.Th… Wp Directory Kit 1.2.7+ Fix from $2,3002024-12-13 MEDIUM 6.1 CVE-2024-37487 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in wpdirectorykit.Com WP Directory Kit allo… Wp Directory Kit 1.3.6+ Fix from $1,6002024-07-21 HIGH 8.8 CVE-2024-3217 The WP Directory Kit plugin for WordPress is vulnerable to SQL Injection via the 'attribute_value' and 'attribute_id' parameters in all versions up t… Wp Directory Kit 1.3.1+ Fix from $1,9502024-04-05 MEDIUM 6.1 CVE-2024-29774 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WpDirectoryKit WP Directory Kit allows Reflecte… Wp Directory Kit 1.3.0+ Fix from $1,6002024-03-27 MEDIUM 6.1 CVE-2023-31229 URL Redirection to Untrusted Site ('Open Redirect') vulnerability in WP Directory Kit.This issue affects WP Directory Kit: from n/a through 1.1.9. Wp Directory Kit 1.2.0+ Fix from $1,6002023-12-29 MEDIUM 5.4 CVE-2023-2279 The WP Directory Kit plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.2.1. This is due to missing… Wp Directory Kit 1.2.2+ Fix from $1,6002023-08-31 CRITICAL 9.8 CVE-2023-2278 The WP Directory Kit plugin for WordPress is vulnerable to Local File Inclusion in versions up to, and including, 1.1.9 via the 'wdk_public_action' f… Wp Directory Kit 1.2.0+ Fix from $2,3002023-06-13 MEDIUM 5.3 CVE-2023-2280 The WP Directory Kit plugin for WordPress is vulnerable to unauthorized modification of data and loss of data due to a missing capability check on th… Wp Directory Kit 1.2.3+ Fix from $1,6002023-06-09 MEDIUM 6.1 CVE-2023-2835 The WP Directory Kit plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'search' parameter in versions up to, and including… Wp Directory Kit after 1.2.3 Fix from $1,6002023-06-02