VendorsWP Directory Kitwp_directory_kitany version
Vulnerabilities

WP Directory Kit Wp Directory Kit any version

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

13CVEs
CVE-2025-13390
WP Directory Kit <= 1.4.4 - Authentication Bypass to Privilege Escalation via Account Takeover
Published 2025-12-03 · Analyzed
10.0EPSS 0.046
CVE-2023-2278
WP Directory Kit <= 1.1.9 - Unauthenticated Local File Inclusion via wdk_public_action
Published 2023-06-13 · Modified
9.8EPSS 0.017
CVE-2023-41875
WordPress WP Directory Kit plugin <= 1.2.6 - Broken Access Control vulnerability
Published 2024-12-13 · Modified
9.8EPSS 0.008
CVE-2024-3217
WP Directory Kit <= 1.3.0 - Authenticated (Subscriber+) SQL Injection
Published 2024-04-05 · Modified
8.8EPSS 0.019
CVE-2024-29774
WordPress WP Directory Kit plugin <= 1.2.9 - Reflected Cross Site Scripting (XSS) vulnerability
Published 2024-03-27 · Modified
7.1EPSS 0.004
CVE-2024-37487
WordPress WP Directory Kit plugin <= 1.3.5 - Reflected Cross Site Scripting (XSS) vulnerability
Published 2024-07-21 · Modified
7.1EPSS 0.003
CVE-2023-2351
WP Directory Kit <= 1.2.3 - Missing Authorization to Plugin Settings Change/Delete, Demo Import, Directory Kit Deletion via wdk_admin_action
Published 2023-06-13 · Modified
6.5EPSS 0.006
CVE-2023-2280
WP Directory Kit <= 1.2.2 - Missing Authorization to Plugin Installation, Settings Change/Delete, Demo Import, Directory Kit Deletion via wdk_public_action
Published 2023-06-09 · Modified
6.5EPSS 0.006
CVE-2023-2835
WP Directory Kit <= 1.2.3 - Reflected Cross-Site Scripting via 'search'
Published 2023-06-02 · Modified
6.1EPSS 0.007
CVE-2023-2277
WP Directory Kit <= 1.1.9 - Cross-Site Request Forgery to Stored Cross-Site Scripting via wdk_resultitem
Published 2023-06-13 · Modified
6.1EPSS 0.003
CVE-2023-31229
WordPress WP Directory Kit Plugin <= 1.1.9 is vulnerable to Open Redirection
Published 2023-12-29 · Modified
6.1EPSS 0.003
CVE-2023-2279
WP Directory Kit <= 1.2.1 - Cross-Site Request Forgery to Plugin Settings Change/Delete, Demo Import, Directory Kit Modification/Deletion via admin_page_display
Published 2023-08-31 · Modified
5.4EPSS 0.003
CVE-2024-37253
WordPress WPDirectoryKit plugin <= 1.3.6 - HTML Injection vulnerability
Published 2024-07-09 · Analyzed
2.7EPSS 0.003