Wpdirectorykit Wp Directory Kit — known CVE vulnerabilities

Every CVE whose affected-product data names Wpdirectorykit Wp Directory Kit, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (13)

• CVE-2025-13390 — CVSS 10.0 (critical): The WP Directory Kit plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 1.4.4 due to…
• CVE-2023-2278 — CVSS 9.8 (critical): The WP Directory Kit plugin for WordPress is vulnerable to Local File Inclusion in versions up to, and including, 1.1.9 via the…
• CVE-2024-3217 — CVSS 8.8 (high): The WP Directory Kit plugin for WordPress is vulnerable to SQL Injection via the 'attribute_value' and 'attribute_id' parameters in all…
• CVE-2024-37487 — CVSS 7.1 (high): Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in wpdirectorykit.Com WP…
• CVE-2024-29774 — CVSS 7.1 (high): Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WpDirectoryKit WP Directory Kit…
• CVE-2023-2280 — CVSS 6.5 (medium): The WP Directory Kit plugin for WordPress is vulnerable to unauthorized modification of data and loss of data due to a missing capability…
• CVE-2023-2351 — CVSS 6.5 (medium): The WP Directory Kit plugin for WordPress is vulnerable to unauthorized modification of data and loss of data due to a missing capability…
• CVE-2023-2277 — CVSS 6.1 (medium): The WP Directory Kit plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.1.9. This is due…
• CVE-2023-2835 — CVSS 6.1 (medium): The WP Directory Kit plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'search' parameter in versions up to, and…
• CVE-2023-2279 — CVSS 5.4 (medium): The WP Directory Kit plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.2.1. This is due…
• CVE-2023-41875 — CVSS 5.3 (medium): Missing Authorization vulnerability in wpdirectorykit.com WP Directory Kit allows Exploiting Incorrectly Configured Access Control Security…
• CVE-2023-31229 — CVSS 4.7 (medium): URL Redirection to Untrusted Site ('Open Redirect') vulnerability in WP Directory Kit.This issue affects WP Directory Kit: from n/a through…
• CVE-2024-37253 — CVSS 2.7 (low): Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') vulnerability in WpDirectoryKit WP…