CVE-2026-118421mediumCWE-89

CVE-2026-118421: falha de média gravidade em WP Directory Kit

WP Directory Kit < 1.6.3 - Listing Admin+ SQL Injection via 'order_by' Parameter

Publicada em

Seguir esta CVE+ Monitorar WP Directory Kit

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

33Vexday Risk Score

Sem sinal de exploração. Ela tem prova de conceito pública.

ssvc Attendcvss 6.8epss 0.2%
The WP Directory Kit WordPress plugin before 1.6.3 does not properly sanitise and escape a parameter used to order results on one of its admin screens before using it in a SQL statement, relying on a keyword deny-list whose replacement order can be bypassed, making it possible for users holding the WP Directory Kit WordPress plugin before 1.6.3's custom Listing Admin role, and above, to perform SQL injection attacks.
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N
Produtos afetados
Unknown · WP Directory Kit
⚠ Recursos públicos, para você avaliar a exposição de sistemas que controla ou está autorizado a testar. Teste apenas com autorização.
CVEs relacionadas — WP Directory Kit

No mesmo produto, das mais perigosas para as menos.

CVE-2026-18473CRITICALWP Directory Kit < 1.5.5 - Unauthenticated SQL Injection via 'field_search' ParameterEPSS 0.5%CVE-2026-18653HIGHWP Directory Kit < 1.5.7 - Admin+ SQL Injection via section ParameterEPSS 0.4%CVE-2026-18474HIGHWP Directory Kit < 1.5.6 - Unauthenticated SQL Injection via search_location and search_categoryEPSS 0.4%CVE-2026-16594HIGHWP Directory Kit < 1.5.5 - Subscriber+ Plugin Settings and API Key DisclosureEPSS 0.4%CVE-2026-118420MEDIUMWP Directory Kit < 1.6.3 - Listing Admin+ SQL Injection via 'main_field' ParameterEPSS 0.4%CVE-2026-16593MEDIUMWP Directory Kit <= 1.5.7 - Editor+ SQL Injection via Elementor Category and Location Widget SettingsEPSS 0.4%