W
Vendor security profile
WPDirectoryKit
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs5
Critical1
CISA KEV0
Public exploit0
Patch rate%0
Avg. CVSS7.3
12-month vulnerability rate
0
0
0
0
0
0
0
0
0
2
2
1
CVE KEV
CVE severity distribution
5toplam CVE
Critical1 (20%)
High1 (20%)
Medium3 (60%)
Patch and exploitation view
%0
Verified patch
%0
CISA KEV
%0
Public exploit
0Patch available
0Partial
0Workaround
0Vendor: no patch
5Unknown
Latest vulnerabilities
6.5
CVE-2026-96653
WP Directory Kit <= 1.5.9 - Authenticated (Subscriber+) SQL Injection via 'display_name' Profile Field (Second-Order)
W
Patch status unknownEPSS %0
6.5
CVE-2026-16596
WP Directory Kit <= 1.5.4 - Authenticated (Custom+) SQL Injection via 'data_fields_list' Parameter
W
Patch status unknownEPSS %0
6.5
CVE-2026-16588
WP Directory Kit <= 1.5.4 - Authenticated (Custom+) SQL Injection via 'order_by' Parameter
W
Patch status unknownEPSS %0
9.3
CVE-2026-28001
WordPress WP Directory Kit plugin <= 1.5.4 - SQL Injection vulnerability
W
Patch status unknownEPSS %0
7.5
CVE-2026-27538
WordPress WP Directory Kit plugin <= 1.5.4 - SQL Injection vulnerability
W
Patch status unknownEPSS %0