Threats tagged 'ghsa-248x-v9v8-c5hf'

The WP Directory Kit WordPress plugin versions before 1.6.3 contain a vulnerability where a parameter used to order results on an admin screen is not properly sanitized or escaped. This flaw allows users with the custom Listing Admin role or higher to perform SQL injection attacks by bypassing the plugin's keyword deny-list filtering.