CVE-2026-18474 | WP Directory Kit Plugin up to 1.5.5 on WordPress sql injection

August 12, 2026 Yanac

A vulnerability was found in WP Directory Kit Plugin up to 1.5.5 on WordPress. It has been rated as critical. The affected element is an unknown function. The manipulation leads to sql injection.

This vulnerability is referenced as CVE-2026-18474. Remote exploitation of the attack is possible. No exploit is available.

Upgrading the affected component is advised.VulDB Recent EntriesRead More