EUVD-2026-57936
GHSA-c33p-q727-j9jw
Severity by source
AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:L
Unauthenticated network vector confirmed by description; AC:H reflects specific endpoint condition required; S:C captures shared WordPress database cross-table exposure; I:N consistent with apparent read-only injection behavior.
Primary rating from Vendor (Patchstack).
CVSS VectorVendor: Patchstack
Lifecycle Timeline
2DescriptionCVE.org
Unauthenticated SQL Injection in WP Directory Kit <= 1.5.4 versions.
AnalysisAI
SQL injection in WP Directory Kit versions 1.5.4 and earlier enables remote unauthenticated attackers to extract sensitive database contents, including WordPress user credentials and site configuration data, without any account or prior foothold. The CVSS 3.1 score of 7.5 includes a Scope Changed designation, reflecting that the shared WordPress MySQL database - reachable by all installed plugins - is exposed beyond the plugin's own schema. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | The target WordPress site must have WP Directory Kit version 1.5.4 or earlier installed and active; deactivated or uninstalled instances are not exposed. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS 7.5 score combines a network-accessible, unauthenticated (PR:N, UI:N) attack vector with high confidentiality impact and scope change - a combination that typically demands urgent prioritization. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Patch available per vendor advisory - update WP Directory Kit to a version beyond 1.5.4 immediately using the WordPress admin plugin update interface or WP-CLI. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours, inventory all WP Directory Kit installations to identify affected versions and disable the plugin if not mission-critical. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
More in Wp Directory Kit
View allThe WP Directory Kit plugin for WordPress is vulnerable to SQL Injection via the 'attribute_value' and 'attribute_id' pa
Unauthenticated SQL injection in WP Directory Kit WordPress plugin (all versions before 1.5.6) allows remote attackers t
SQL injection in WP Directory Kit WordPress plugin (all versions before 1.5.6) allows any authenticated user - including
The WP Directory Kit plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 1
The WP Directory Kit plugin for WordPress is vulnerable to Local File Inclusion in versions up to, and including, 1.1.9
SQL injection via an unsecured AJAX endpoint in WP Directory Kit (WordPress plugin) before 1.5.5 allows any authenticate
WP Directory Kit versions before 1.5.5 expose the plugin's full settings - including sensitive API keys and third-party
SQL injection in WP Directory Kit WordPress plugin before 1.5.7 is exploitable by authenticated administrators, with mat
Unauthorized data exposure in the WP Directory Kit WordPress plugin (all versions before 1.5.5) allows any authenticated
WP Directory Kit WordPress plugin before version 1.5.5 exposes sensitive site data to any authenticated user due to miss
The WP Directory Kit plugin for WordPress is vulnerable to unauthorized modification of data and loss of data due to a m
The WP Directory Kit plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'search' parameter in
Same weakness CWE-89 – SQL Injection
View allShare
External POC / Exploit Code
Leaving vuln.today