CVE-2026-118420 | WP Directory Kit Plugin up to 1.6.2 on WordPress sql injection

November 11, 2026 Yanac

A vulnerability, which was classified as problematic, has been found in WP Directory Kit Plugin up to 1.6.2 on WordPress. This impacts an unknown function. The manipulation leads to sql injection.

This vulnerability is listed as CVE-2026-118420. The attack may be initiated remotely. There is no available exploit.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More