Known vulnerabilities in the Wpdirectorykit plugin
8 security advisories have been published for the Wpdirectorykit plugin. Each entry below states what an attacker can do, what privilege they need, and the version the issue was fixed in.
- Wpdirectorykit - Cross-Site Scripting (XSS) (CVE-2025-13525) MEDIUM
- Wpdirectorykit - SQL Injection (CVE-2025-13138) HIGH
- Wpdirectorykit - SQL Injection (CVE-2024-3217) HIGH
- Wpdirectorykit - Cross-Site Request Forgery (CSRF) (CVE-2023-2279) MEDIUM
- Wpdirectorykit - Path Traversal (CVE-2023-2278) CRITICAL
- Wpdirectorykit - Broken Access Control (CVE-2023-2351) MEDIUM
- Wpdirectorykit - Cross-Site Request Forgery (CSRF) (CVE-2023-2277) MEDIUM
- Wpdirectorykit - Broken Access Control (CVE-2023-2280) MEDIUM