Description
Unauthenticated SQL Injection in Directory Pro <= 2.5.8 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| e-plugins | Directory Pro | ≤ 2.5.8 | — |
Critical · 9.3
CVE-2026-66649
EUVD-2026-63302GHSA-rg68-729g-x9vg
WordPress Directory Pro plugin <= 2.5.8 - SQL Injection vulnerability
Published Aug 20, 2026 · Updated Aug 20, 2026 · Assigned by Patchstack