CVE-2026-109197 | wpdirectorykit WP Directory Kit Plugin up to 1.6.0 on WordPress idfield sql injection

October 31, 2026 Yanac

A vulnerability marked as critical has been reported in wpdirectorykit WP Directory Kit Plugin up to 1.6.0 on WordPress. The affected element is an unknown function. The manipulation of the argument idfield leads to sql injection.

This vulnerability is referenced as CVE-2026-109197. Remote exploitation of the attack is possible. No exploit is available.VulDB Recent EntriesRead More