CVE-2026-18230

Name of the Vulnerable Software and Affected Versions WP Directory Kit versions prior to 1.5.6

Description An authenticated AJAX action in the WP Directory Kit WordPress plugin lacks an authorization check and fails to sanitize and escape the section parameter before incorporating it into a SQL statement. This allows any authenticated user, including those with Subscriber level privileges, to execute SQL injection attacks, which involve inserting malicious SQL code into a query to manipulate the database.

Recommendations Update WP Directory Kit to version 1.5.6 or later. As a temporary mitigation, restrict access to the affected AJAX action or avoid using the section parameter until the update is applied.