Aller au contenu
en Se connecter
6.5 Moyenne

CVE-2026-16590 The WP Directory Kit WordPress plugin before 1.5.5 does not perform authorization or nonce checks on one of its…

Description

The WP Directory Kit WordPress plugin before 1.5.5 does not perform authorization or nonce checks on one of its authenticated AJAX actions, allowing any authenticated user such as a Subscriber to retrieve stored contact messages and associated user data belonging to other users.

Produits et versions touchés

Produit Versions touchées Corrigé en
WP Directory Kit 1.5 premières → < 1.5.5 1.5.5

Références

Chronologie

  1. Publiée
  2. Dernière modification

Autres CVE de WP Directory Kit

Les 13 CVE de WP Directory Kit →
CVE-2026-16591 The WP Directory Kit WordPress plugin before 1.5.8 does not sanitize and escape some of its category and location fields… 7.2 Élevée CVE-2026-16593 The WP Directory Kit WordPress plugin through 1.5.7 does not sanitize and escape some widget settings before using… 6.8 Moyenne CVE-2026-18232 The WP Directory Kit WordPress plugin through 1.5.7 does not check the status or ownership of a listing before returning… 5.3 Moyenne CVE-2026-16592 The WP Directory Kit WordPress plugin through 1.5.7 does not check authorization or listing visibility in one of its… 2.7 Faible
Suivre cette CVE