Skip to content
OpenAdvisories

Vendor

Sarah Giles

5 known vulnerabilities.

Products

Dynamic User Directory 5
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.1
    CVE-2026-125856

    WordPress Dynamic User Directory plugin <= 2.4 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Sarah Giles Dynamic User Directory dynamic-user-directory allows Reflected XSS.This issue affects Dynamic User Directory: from n/a through 2.4.

    Sarah Giles Dynamic User Directory
  • High 7.6
    CVE-2026-42720

    WordPress Dynamic User Directory plugin <= 2.4 - SQL Injection vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Sarah Giles Dynamic User Directory dynamic-user-directory allows Blind SQL Injection.This issue affects Dynamic User Directory: from n/a through 2.4.

    Sarah Giles Dynamic User Directory