CVE-2026-118421 | WP Directory Kit Plugin up to 1.6.2 on WordPress Admin Screens sql injection

November 12, 2026 Yanac

A vulnerability marked as problematic has been reported in WP Directory Kit Plugin up to 1.6.2 on WordPress. Impacted is an unknown function of the component Admin Screens. The manipulation leads to sql injection.

This vulnerability is referenced as CVE-2026-118421. Remote exploitation of the attack is possible. No exploit is available.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More