CVE-2026-16589: CWE-89 SQL Injection in WP Directory Kit
The WP Directory Kit WordPress plugin before 1.5.5 does not sanitize and escape a parameter before using it in a SQL statement through one of its authenticated AJAX actions, which lacks authorization and nonce checks, allowing any authenticated user such as a Subscriber to perform SQL injection attacks.
AI Analysis
Technical Summary
CVE-2026-16589 is a SQL injection vulnerability in the WP Directory Kit WordPress plugin prior to version 1.5.5. The flaw arises because an authenticated AJAX action does not sanitize or escape a parameter before incorporating it into a SQL statement. Additionally, this AJAX action lacks proper authorization and nonce verification, enabling any authenticated user, including low-privilege roles, to perform SQL injection attacks against the underlying database.
Potential Impact
An attacker with any authenticated user account, including Subscriber-level access, can exploit this vulnerability to execute arbitrary SQL commands on the database. This could lead to unauthorized data access, data modification, or other impacts depending on the database privileges of the WordPress application. The vulnerability increases the risk of data compromise or corruption within the affected WordPress site.
Mitigation Recommendations
No official patch or remediation guidance is currently available. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is released, restrict authenticated user roles and monitor for suspicious activity related to AJAX actions in the plugin.
CVE-2026-16589: CWE-89 SQL Injection in WP Directory Kit
Description
The WP Directory Kit WordPress plugin before 1.5.5 does not sanitize and escape a parameter before using it in a SQL statement through one of its authenticated AJAX actions, which lacks authorization and nonce checks, allowing any authenticated user such as a Subscriber to perform SQL injection attacks.
Affected software
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
CVE-2026-16589 is a SQL injection vulnerability in the WP Directory Kit WordPress plugin prior to version 1.5.5. The flaw arises because an authenticated AJAX action does not sanitize or escape a parameter before incorporating it into a SQL statement. Additionally, this AJAX action lacks proper authorization and nonce verification, enabling any authenticated user, including low-privilege roles, to perform SQL injection attacks against the underlying database.
Potential Impact
An attacker with any authenticated user account, including Subscriber-level access, can exploit this vulnerability to execute arbitrary SQL commands on the database. This could lead to unauthorized data access, data modification, or other impacts depending on the database privileges of the WordPress application. The vulnerability increases the risk of data compromise or corruption within the affected WordPress site.
Mitigation Recommendations
No official patch or remediation guidance is currently available. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is released, restrict authenticated user roles and monitor for suspicious activity related to AJAX actions in the plugin.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- WPScan
- Date Reserved
- 2026-07-22T13:47:30.930Z
- Cvss Version
- null
- State
- PUBLISHED
- Remediation Level
- null
Threat ID: 6a76cc2abf8831d53911471e
Added to database: 08/08/2026, 06:26:50 UTC
Last enriched: 08/08/2026, 06:47:33 UTC
Last updated: 08/08/2026, 14:56:09 UTC
Views: 8
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
External Links
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.