WP Directory Kit
Security Risk Profile
Security Risk Score
Comprehensive risk assessment based on 13 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from April 5, 2024 to present
Threat Assessment
Severity Distribution
Exploit Likelihood
Age Distribution
Common Weaknesses (CWE)
Most Affected Products
Recent Vulnerabilities
See more →WP Directory Kit < 1.6.3 - Unauthenticated User Data and Contact Message Disclosure
WP Directory Kit < 1.6.3 - Listing Admin+ SQL Injection via 'main_field' Parameter
WP Directory Kit <= 1.6.0 - Unauthenticated SQL Injection via 'idfield' Parameter
WP Directory Kit <= 1.5.9 - Authenticated (Subscriber+) SQL Injection via 'display_name' Profile Field (Second-Order)
WP Directory Kit < 1.5.8 - Listing Admin+ Stored XSS via Category and Location Title and Icon Fields
WP Directory Kit < 1.5.5 - Subscriber+ Contact Message and User Data Disclosure
WP Directory Kit < 1.5.5 - Subscriber+ Plugin Settings and API Key Disclosure
WP Directory Kit <= 1.4.4 - Authentication Bypass to Privilege Escalation via Account Takeover
WP Directory Kit <= 1.4.6 - Authenticated (Admin+) SQL Injection
WP Directory Kit <= 1.4.5 - Reflected Cross-Site Scripting via 'order_by' Parameter
Monitor WP Directory Kit in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.