Threats tagged 'ghsa-h2ww-jgwc-gxx6'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
High	7.5	CVE-2025-13138The WP Directory Kit plugin for WordPress is vulnerable to SQL Injection via the 'columns_search' parameter of the High7.52025-11-21GCVE DatabaseCVE-2025-13138 The WP Directory Kit plugin for WordPress contains a SQL Injection vulnerability in the 'columns_search' parameter of the select_2_ajax() function. This affects all versions up to and including 1.4.3. The flaw allows unauthenticated attackers to inject additional SQL queries due to insufficient escaping and lack of proper query preparation, potentially exposing sensitive database information. Report on CVE-2025-13138 Vulnerability CWE-89 #ghsa-h2ww-jgwc-gxx6	GCVE Database	2025-11-21

Page 1 of 1