CVE · Critical

CVE-2026-42672 — WP Directory Kit [wpdirectorykit] < 1.5.2

CVE Vulnerability Type Severity Affected Fixed in Published Status
CVE-2026-42672 WP Directory Kit [wpdirectorykit] < 1.5.2 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Critical 9.3 < 1.5.2 1.5.2 2026-05-14 —

Scan your WordPress site free

No signup, no credit card — enter your URL and get a security report in seconds.