CVE-2026-16588 | wpdirectorykit WP Directory Kit Plugin up to 1.5.4 on WordPress order_by sql injection

A vulnerability classified as problematic has been found in wpdirectorykit WP Directory Kit Plugin up to 1.5.4 on WordPress. The affected element is an unknown function. Performing a manipulation of the argument order_by results in sql injection.

This vulnerability is identified as CVE-2026-16588. The attack can be initiated remotely. There is not any exploit available.VulDB Recent EntriesRead More