CVE Alert & Security Feed

Stats Digest Feeds

← Back to all CVEs

CVE-2026-28001

CRITICAL NVD

CVSS Score 9.3

Severity CRITICAL

Published Aug 13, 2026

Vendor unknown

Description

Unauthenticated SQL Injection in WP Directory Kit <= 1.5.4 versions.

References

https://patchstack.com/database/wordpress/plugin/wpdirectorykit/vulnerability/wordpress-wp-directory-kit-plugin-1-5-4-sql-injection-vulnerability-2?_s_id=cve