CVE-2026-16589 | WP Directory Kit Plugin up to 1.5.4 on WordPress sql injection

August 8, 2026 Yanac

A vulnerability was found in WP Directory Kit Plugin up to 1.5.4 on WordPress. It has been declared as critical. This vulnerability affects unknown code. Executing a manipulation can lead to sql injection.

This vulnerability appears as CVE-2026-16589. The attack may be performed from remote. There is no available exploit.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More