PT-2026-78293 · WordPress · Wp Directory Kit
CVSS v3.1
5.3
Medium
| Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
WP Directory Kit versions prior to 1.5.7
Description
An authorization bypass exists in a public AJAX action that returns unfiltered database rows. This allows unauthenticated attackers to retrieve usernames and email addresses of users associated with the plugin roles via the
select 2 ajax user endpoint.Recommendations
Update WP Directory Kit to version 1.5.7 or later.
Exploit
Fix
Information Disclosure
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Wp Directory Kit