Threats tagged 'ghsa-pq9q-h2f7-c2j2'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
High	–	CVE-2026-118420The WP Directory Kit WordPress plugin before 1.6.3 does not sanitise and escape a parameter before using it in a SQL High2026-11-11GCVE DatabaseCVE-2026-118420 The WP Directory Kit WordPress plugin versions before 1.6.3 contain a vulnerability where a parameter is not properly sanitized and escaped before being used in a SQL statement. This flaw allows users with the custom Listing Admin role or higher to perform SQL injection attacks. Report on CVE-2026-118420 Vulnerability #ghsa-pq9q-h2f7-c2j2	GCVE Database	2026-11-11

Page 1 of 1