CVE-2026-39531

CriticalCVSS 9.3/10Last modified Jul 23, 2026

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Wp Directory Kit WP Directory Kit allows Blind SQL Injection.

This issue affects WP Directory Kit: from n/a through 1.5.0.

Metrics

CVSS 3.1 9.3/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L

Weakness enumeration

CWE-89

Affected software

No affected versions have been published.

Timeline

Published
May 21, 2026
Last modified
Jul 23, 2026
NVD status
Deferred

Related CVEs from 2026

CVE-2026-395328.8Contributor PHP Object Injection in Events Calendar for GeoDirectory <= 2.3.25 versions.CVE-2026-395337.5Unauthenticated Broken Access Control in AWP Classifieds <= 4.4.4 versions.CVE-2026-395347.5Unauthenticated Broken Access Control in WP Directory Kit <= 1.5.0 versions.CVE-2026-395355.3Missing Authorization vulnerability in fullworks Display Eventbrite Events widget-for-eventbrite-api allows Exploiting Incorrectly ConfigureCVE-2026-395365.3Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in WP Chill RSVP and Event Management rsvp allows RCVE-2026-395378.1Unauthenticated Local File Inclusion in Mikado Core <= 1.6 versions.CVE-2026-395387.5Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes MikadCVE-2026-395398.1Unauthenticated PHP Object Injection in Alloggio - Hotel Booking <= 2.1.2 versions.CVE-2026-39546.5A weakness has been identified in OpenBMB XAgent 1.0.0. Affected by this vulnerability is the function workspace of the file XAgentServer/apCVE-2026-395406.5Subscriber Cross Site Scripting (XSS) in Shipment Tracker for Woocommerce <= 1.5.3.2 versions.CVE-2026-395415.9Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Themefic Hydra Booking hydra-booking aCVE-2026-395425.3Insertion of Sensitive Information Into Sent Data vulnerability in Doofinder Doofinder for WooCommerce doofinder-for-woocommerce allows Retr