WP Directory Kit SQL Injection Vulnerability

A blind SQL injection vulnerability has been identified in the WP Directory Kit WordPress plugin, affecting versions through 1.5.1. This vulnerability allows attackers to manipulate SQL queries, potentially leading to unauthorized data access or modification.

Impact

Exploitation of this vulnerability could allow attackers to interact with the database of the affected WordPress site, with the possibility of stealing or manipulating information.

Remediation

Users of the WP Directory Kit WordPress plugin should update to version 1.5.2 or later to address this vulnerability. Patchstack users can enable auto-updates for vulnerable plugins.