CVE-2026-16596 | wpdirectorykit WP Directory Kit Plugin up to 1.5.4 on WordPress data_fields_list sql injection

September 30, 2026 Yanac

A vulnerability was found in wpdirectorykit WP Directory Kit Plugin up to 1.5.4 on WordPress and classified as critical. The affected element is an unknown function. The manipulation of the argument data_fields_list results in sql injection.

This vulnerability is reported as CVE-2026-16596. The attack can be launched remotely. No exploit exists.VulDB Recent EntriesRead More