Vulnerability index

Browse CVEs

10 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Wp Directory Kit CRITICAL 9.8
CVE-2025-13390

The WP Directory Kit plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 1.4.4 due to incorrect impleme…

Fix: after 1.4.4
Fix from $2,300 2025-12-03
Wp Directory Kit CRITICAL 9.8
CVE-2023-41875

Missing Authorization vulnerability in wpdirectorykit.com WP Directory Kit allows Exploiting Incorrectly Configured Access Control Security Levels.Th…

Fix: 1.2.7+
Fix from $2,300 2024-12-13
Wp Directory Kit MEDIUM 6.1
CVE-2024-37487

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in wpdirectorykit.Com WP Directory Kit allo…

Fix: 1.3.6+
Fix from $1,600 2024-07-21
Wp Directory Kit HIGH 8.8
CVE-2024-3217

The WP Directory Kit plugin for WordPress is vulnerable to SQL Injection via the 'attribute_value' and 'attribute_id' parameters in all versions up t…

Fix: 1.3.1+
Fix from $1,950 2024-04-05
Wp Directory Kit MEDIUM 6.1
CVE-2024-29774

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WpDirectoryKit WP Directory Kit allows Reflecte…

Fix: 1.3.0+
Fix from $1,600 2024-03-27
Wp Directory Kit MEDIUM 6.1
CVE-2023-31229

URL Redirection to Untrusted Site ('Open Redirect') vulnerability in WP Directory Kit.This issue affects WP Directory Kit: from n/a through 1.1.9.

Fix: 1.2.0+
Fix from $1,600 2023-12-29
Wp Directory Kit MEDIUM 5.4
CVE-2023-2279

The WP Directory Kit plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.2.1. This is due to missing…

Fix: 1.2.2+
Fix from $1,600 2023-08-31
Wp Directory Kit CRITICAL 9.8
CVE-2023-2278

The WP Directory Kit plugin for WordPress is vulnerable to Local File Inclusion in versions up to, and including, 1.1.9 via the 'wdk_public_action' f…

Fix: 1.2.0+
Fix from $2,300 2023-06-13
Wp Directory Kit MEDIUM 5.3
CVE-2023-2280

The WP Directory Kit plugin for WordPress is vulnerable to unauthorized modification of data and loss of data due to a missing capability check on th…

Fix: 1.2.3+
Fix from $1,600 2023-06-09
Wp Directory Kit MEDIUM 6.1
CVE-2023-2835

The WP Directory Kit plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'search' parameter in versions up to, and including…

Fix: after 1.2.3
Fix from $1,600 2023-06-02