CVE-2026-39531

Critical

Open

TLP:CLEAR

WordPress WP Directory Kit plugin <= 1.5.0 - SQL Injection vulnerability

NVD CVE.org

AI Analysis

No AI analysis yet.

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Wp Directory Kit WP Directory Kit allows Blind SQL Injection. This issue affects WP Directory Kit: from n/a through 1.5.0.

Details

CVSS Score: 9.3
EPSS Score ⓘ: 0.24%

15.5th percentile
CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L
Confidence: 90%
Published: May 21, 2026
Last Modified: May 21, 2026

Notes

0

Log in to add a note

No notes yet. Click "Add Note" to create the first analysis note.

Opinions

0

Log in to add an opinion

No opinions yet. Be the first to assess this intelligence.