WordPress Institutions Directory Plugin Privilege Escalation Vulnerability

Vulnerability

A privilege escalation vulnerability has been identified in the WordPress Institutions Directory plugin, specifically in versions through 1.3.4. This vulnerability allows users with low privileges to escalate their rights, potentially leading to full control of the website.

Impact

Exploitation of this vulnerability could allow a user to escalate privileges, gaining higher access rights and possibly full control over the website.

Remediation

Patchstack has issued a mitigation rule to block attacks targeting this vulnerability. Users can activate this mitigation through Patchstack's services.

Added: Jan 22, 2026, 8:14 PM
Updated: Jan 22, 2026, 8:14 PM

Vulnerability Rating

Custom Algorithm
spread
2.2
impact
7.5
exploitability
5.4
remediation
7.9
relevance
2.3
threat
0.0
urgency
2.9
incentive
0.0

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.