Skip to content
OpenAdvisories

Vendor

wpdirectorykit

23 known vulnerabilities.

Products

WP Directory Kit 21 Sweet Energy Efficiency 2
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.8
    CVE-2024-3217 Public exploit

    WP Directory Kit <= 1.3.0 - Authenticated (Subscriber+) SQL Injection

    The WP Directory Kit plugin for WordPress is vulnerable to SQL Injection via the 'attribute_value' and 'attribute_id' parameters in all versions up to, and including, 1.3.0 due to insufficient escaping on the user supplied parameter and lack of sufficient pre…

    wpdirectorykit WP Directory Kit Web / CMS