Threats tagged 'ghsa-cgvr-qh7p-wh5w'

The WP Directory Kit WordPress plugin versions before 1.6.3 have a vulnerability where the public directory-search action does not restrict access to database models and columns, nor verify authorization. This allows unauthenticated attackers to access personal user data such as email addresses, logins, and private contact-form submissions.