Skip to content
OpenAdvisories

Product · listingthemes

WP Directory Kit

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 10.0
    CVE-2025-13390 Public exploit Scanner template

    WP Directory Kit <= 1.4.4 - Authentication Bypass to Privilege Escalation via Account Takeover

    The WP Directory Kit plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 1.4.4 due to incorrect implementation of the authentication algorithm in the "wdk_generate_auto_login_link" function. This is due to the fea…

    listingthemes WP Directory Kit Web / CMS