CVE-2026-16591 | WP Directory Kit Plugin up to 1.5.7 on WordPress cross site scripting

September 26, 2026 Yanac

A vulnerability, which was classified as problematic, was found in WP Directory Kit Plugin up to 1.5.7 on WordPress. Affected by this vulnerability is an unknown functionality. Executing a manipulation can lead to cross site scripting.

This vulnerability appears as CVE-2026-16591. The attack may be performed from remote. There is no available exploit.

You should upgrade the affected component.VulDB Recent EntriesRead More