Threats tagged 'ghsa-42rf-5p25-qxgw'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	6.5	EPSS 0.4%	CVE-2026-16595WP Directory Kit · Information Exposure Medium6.5EPSS 0.4%2026-08-08CVE Database V5CVE-2026-16595 The WP Directory Kit WordPress plugin before 1.5.5 does not perform authorization or nonce checks on one of its authenticated AJAX actions, allowing any authenticated user such as a Subscriber to disclose the site's user list and unpublished listings belonging to other users. EPSS 0.4%Vulnerability CWE-200 #ghsa-42rf-5p25-qxgw	CVE Database V5	2026-08-08

Page 1 of 1