CVE-2026-18474

HighCVSS 8.6/10Last modified Aug 26, 2026

Description

The WP Directory Kit WordPress plugin before 1.5.6 does not sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by unauthenticated users when a non-default search field type is configured.

Metrics

CVSS 3.1 8.6/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N

Weakness enumeration

CWE-89

Affected software

Vendor	Product	Versions
Unknown	WP Directory Kit	< 1.5.6

References

https://wpscan.com/vulnerability/cadb99e3-bb6a-4d44-8ef0-eff524d31b29/

Timeline

Published: Aug 12, 2026
Last modified: Aug 26, 2026
NVD status: Deferred

Related CVEs from 2026

CVE-2026-184774.4A TOCTOU (Time-of-Check Time-of-Use) vulnerability in GNU tar's incremental dumpdir 'X' rename handling allows a local attacker with write a CVE-2026-184785.1Magnolia CMS is vulnerable to Stored XSS in import functionality. An attacker with editor privileges can inject arbitrary HTML and JS into t CVE-2026-18487.5Connections received from the proxy port may not count towards total accepted connections, resulting in server crashes if the total number o CVE-2026-184808.8The SureCart WordPress plugin before 4.6.3 does not ensure that the account affected by a customer update is the same account its permissio CVE-2026-184817.3Stored cross-site scripting in the participant URL handling in AWS Ops Wheel before PR #168 might allow an authenticated remote user to ste CVE-2026-184829.8Neo.mjs contains a command injection vulnerability within the FileSystemService.mjs component of the ai/mcp/server/file-system MCP server, w CVE-2026-184846.5IBM ContextForge MCP Gateway 1.0.0 through 1.0.11 could allow a remote authenticated attacker to cause a denial of service due to improper s CVE-2026-184857.8There is a local privilege escalation vulnerability recently discovered in the NI-PAL kernel driver. This may allow a local, authenticated CVE-2026-184868.8IBM ContextForge MCP Gateway <= v1.0.7 MCP Context Forge could allow a remote authenticated attacker to obtain sensitive credentials and esc CVE-2026-184875.4A flaw was found in Epiphany. An issue in how the browser reads web addresses allows attackers to fake the domain name shown in the address CVE-2026-184886.4The Blocksy Companion plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'tagName' Block Attribute (blocksy/dynamic-data)CVE-2026-184897.4IBM ContextForge MCP Gateway - Translate utility <= 1.0.8 MCP Context Forge could allow a remote attacker to obtain sensitive information fr