Vulnerabilities / WP Directory Kit
WP Directory Kit vulnerabilities
Advisories WPSec published for WP Directory Kit. Other sources may list more. Its attack surface: WP Directory Kit on WPSec AttackSurface.
| Published | ID | Vulnerability | Severity | Fixed in |
|---|---|---|---|---|
| 2026-11-07 | WPSEC-2026-2731 | WP Directory Kit <= 1.5.9 - Authenticated (Listing Admin+) Insecure Direct Object Reference to Arbitrary Attachment Deletion | Low 3.3 | 1.6.1 |
| 2026-11-07 | WPSEC-2026-2730 | WP Directory Kit <= 1.5.9 - Authenticated (Listing Admin+) Stored Cross-Site Scripting via Search Suggestions | Medium 5.5 | 1.6.1 |
| 2026-11-07 | WPSEC-2026-2729 | WP Directory Kit <= 1.5.9 - Unauthenticated Sensitive Information Exposure via Front-End AJAX Select, Treefield and Results Endpoints | Medium 5.3 | 1.6.1 |
License: CC BY 4.0