WP Directory Kit

Explore WP Directory Kit vulnerabilities across all versions. Currently tracking 22 known vulnerabilities, including severity, impact, and patch status.

01234567891028.01.2021Today27.04.20235.4WP Directory Kit <= 1.1.9 - Open Redirect CVSS 5.4 · 27.04.202328.04.20235.4WP Directory Kit <= 1.2.1 - Cross-Site Request Forgery to Plugin Settings Change/Delete, Demo Import, Directory Kit Modification/Deletion via admin_page_display CVSS 5.4 · 28.04.20236.1WP Directory Kit <= 1.1.9 - Cross-Site Request Forgery to Stored Cross-Site Scripting via wdk_resultitem CVSS 6.1 · 28.04.202302.05.20236.5WP Directory Kit <= 1.2.2 - Missing Authorization to Plugin Installation, Settings Change/Delete, Demo Import, Directory Kit Deletion via wdk_public_action CVSS 6.5 · 02.05.202326.05.20239.8WP Directory Kit <= 1.1.9 - Unauthenticated Local File Inclusion via wdk_public_action CVSS 9.8 · 26.05.202301.06.20236.1WP Directory Kit <= 1.2.3 - Reflected Cross-Site Scripting via 'search' CVSS 6.1 · 01.06.202312.06.20236.5WP Directory Kit <= 1.2.3 - Missing Authorization to Plugin Settings Change/Delete, Demo Import, Directory Kit Deletion via wdk_admin_action CVSS 6.5 · 12.06.202305.09.20235.3WP Directory Kit <= 1.2.6 - Missing Authorization CVSS 5.3 · 05.09.202325.03.20246.1WP Directory Kit <= 1.2.9 - Reflected Cross-Site Scripting CVSS 6.1 · 25.03.202404.04.20248.8WP Directory Kit <= 1.3.0 - Authenticated (Subscriber+) SQL Injection CVSS 8.8 · 04.04.202426.06.20242.7WP Directory Kit <= 1.3.6 - Authenticated (Admin+) HTML Injection CVSS 2.7 · 26.06.202404.07.20246.1WP Directory Kit <= 1.3.5 - Reflected Cross-Site Scripting CVSS 6.1 · 04.07.202426.09.20255.3WP Directory Kit <= 1.4.0 - Missing Authorization CVSS 5.3 · 26.09.202520.11.20257.5WP Directory Kit <= 1.4.3 - Unauthenticated SQL Injection via select_2_ajax() Function CVSS 7.5 · 20.11.202526.11.20256.1WP Directory Kit <= 1.4.5 - Reflected Cross-Site Scripting via 'order_by' Parameter CVSS 6.1 · 26.11.202501.12.20254.9WP Directory Kit <= 1.4.6 - Authenticated (Admin+) SQL Injection CVSS 4.9 · 01.12.202503.12.202510.0WP Directory Kit <= 1.4.4 - Authentication Bypass to Privilege Escalation via Account Takeover CVSS 10.0 · 03.12.202512.12.20257.5WP Directory Kit <= 1.4.7 - Unauthenticated SQL Injection CVSS 7.5 · 12.12.202523.01.20265.3WP Directory Kit <= 1.4.9 - Unauthenticated Email Exposure via wdk_public_action CVSS 5.3 · 23.01.202608.04.20265.3WP Directory Kit <= 1.5.0 - Missing Authorization CVSS 5.3 · 08.04.202613.04.20267.5WP Directory Kit <= 1.5.0 - Unauthenticated SQL Injection CVSS 7.5 · 13.04.202614.05.20267.5WP Directory Kit <= 1.5.1 - Unauthenticated SQL Injection CVSS 7.5 · 14.05.2026

Strategic Overview

Avg CVSSMedium
6.4/ 10
Patch Coverage100%
Open

0

Fixed

22

Get automatic notifications for all WP Directory Kit vulnerabilities before they are exploited.

Vulnerability Records

22 records
2026-05-14 00:00CVE-2026-42672
7.5
High
darooYes
2026-04-13 00:00CVE-2026-39531
7.5
High
Martín MartínYes
2026-04-08 00:00CVE-2026-39534
5.3
Medium
Martín MartínYes
2026-01-23 23:36CVE-2025-13920
5.3
Medium
Sarawut Poolkhet (MisterHelloz)Yes
2025-12-12 15:19CVE-2025-13089
7.5
High
tmrswrrYes
2025-12-03 00:39CVE-2025-13390
10.0
Critical
Ryan KozakYes
2025-12-01 21:39CVE-2025-13090
4.9
Medium
tmrswrrYes
2025-11-26 17:27CVE-2025-13525
6.1
Medium
blue0x1Yes
2025-11-20 20:36CVE-2025-13138
7.5
High
tmrswrrYes
2025-09-26 00:00CVE-2025-60120
5.3
Medium
Bao - BlueRockYes
Showing 1–10 of 22 reports
WP Directory Kit banner
Latestv1.5.5

WP Directory Kit

WPDirectoryKit

Author

WPDirectoryKit

4.9(35)
98/100
Last Updated
2026-07-29 (12h ago)
Active Installs
2,000+
Downloads
103,168
Requires WP
5.2+
Requires PHP
7.0+
Tested up to
WP 7.0.2
Created
2021-01-28 (6y ago)

Very easy to use and install, plugin will allow you to manage Listings, Categories, Fields from your admin dashboard. As part of project solution we also build WordPress Theme for Real Estate Agency: NexProperty – Property WordPress Theme Real Estate Golden – WordPress Theme Realtor Directory Moison – WordPress Real Estate Theme Apartment – WordPress Real Estate Theme Villa – WordPress Real Estate Theme Dark House – WordPress Real Estate Theme Real Estate Realista – WordPress Theme Real Estate Yillow – WordPress Theme WordPress Theme for Car Dealers, NexCars WordPress Theme for Classified ADS, Classified ADS Full-Service Real Estate Website Solution for your Apartment, Villa, House, basic tourism services, or even a complete Agency based on WP Directory Kit, WebApartman.com Can be also used for Business Directory, Store Locator, Classified Ads, Doctors Directory, Job Portal or any other type of Directory. Almost everything possible to design visually in Elementor, including front pages, resutls pages, listing preview pages etc. Visual designing support for search form and result item/cards. More info on wpdirectorykit.com Documentation: http://wpdirectorykit.com/documentation/ Videos Features Manage Listings Manage Categories Manage Fields Different fields based on category Select listings agent Manage indoor amenities Manage outdoor amenities Listing plans Galleries and Sliders on Listing Preview Multi category and locations search Multimedia fields integration Result items support video and slider Price range search slider Translatable to any language Multiple agents, categories, listings support Full Elementor compatibility Messaging support Demo data import for Real Estate and Car Dealership Open street maps support Energy efficiency plugin available here: Download Premium PAID addons / plugins / features available Official Premium Addons Here Membership Subscriptions & Features Booking & Calendar Import/Export from other portal, idx or similar Multi Currency Favorites Review system Profile picture uploader Mortgage Calculator Facebook Comments Mailchimp integration Report Abuse Listing Payments Compare Listings Save Search with Email Alerts Duplicate Listing PDF Download Claim / Take Ownership WDK Svg Maps WDK Geo Coding WDK Live Messages Chat Mobile Apps for iOS and Android Contact for security issues: https://wpdirectorykit.com/contact/ Credits Stocksnap Images License: StockSnap’s CC0 License Source: https://stocksnap.io/license https://stocksnap.io/photo/interior-design-478BZDEA2Y https://stocksnap.io/photo/house-interior-APBDJIC32G https://stocksnap.io/photo/apartment-bed-EGXWIV409M https://stocksnap.io/photo/sea-ocean-62BFZ9QZUZ License: CC0 License Source: https://pxhere.com/license https://pxhere.com/en/photo/713542 https://pxhere.com/en/photo/925637 https://pxhere.com/en/photo/862253 https://pxhere.com/en/photo/1642266 https://pxhere.com/en/photo/486169 https://pxhere.com/en/photo/1073943 https://pxhere.com/en/photo/1292551 https://pxhere.com/en/photo/1013940 https://pxhere.com/en/photo/1598623 https://pxhere.com/en/photo/1076934 https://pxhere.com/en/photo/1600892 https://pxhere.com/en/photo/941745 https://pxhere.com/en/photo/941746 https://pxhere.com/en/photo/600695 https://pxhere.com/en/photo/863007 https://pxhere.com/en/photo/1389997 https://pxhere.com/en/photo/599832 https://pxhere.com/en/photo/1284562 https://pxhere.com/en/photo/816902 https://pxhere.com/en/photo/670069 https://pxhere.com/en/photo/670068 https://pxhere.com/en/photo/1364746 https://pxhere.com/en/photo/606815 https://pxhere.com/en/photo/516507 https://pxhere.com/en/photo/1632922 https://pxhere.com/en/photo/1208091 https://pxhere.com/en/photo/1015789 https://pxhere.com/en/photo/715744 https://pxhere.com/en/photo/742706 https://pxhere.com/en/photo/459445 https://pxhere.com/en/photo/1601256 https://pxhere.com/en/photo/67776 https://pxhere.com/en/photo/1142138 https://pxhere.com/en/photo/804292 https://pxhere.com/en/photo/1601230 https://pxhere.com/en/photo/157662 https://pxhere.com/en/photo/1629377 https://pxhere.com/en/photo/282629 https://pxhere.com/en/photo/1166111 https://pxhere.com/en/photo/17001 https://pxhere.com/en/photo/733256 https://pxhere.com/en/photo/978943 https://pxhere.com/en/photo/1080730 https://pxhere.com/en/photo/1214210 https://pxhere.com/en/photo/1068912 https://pxhere.com/en/photo/1444777 https://pxhere.com/en/photo/537172 https://pxhere.com/en/photo/720964 https://pxhere.com/en/photo/759959 https://pxhere.com/en/photo/1179825 https://pxhere.com/en/photo/1179825 https://pxhere.com/en/photo/1592155 https://pxhere.com/en/photo/1603984 https://pxhere.com/en/photo/348208 https://pxhere.com/en/photo/990593 https://pxhere.com/en/photo/26750 https://pxhere.com/en/photo/536373 https://pxhere.com/en/photo/449291 https://pxhere.com/en/photo/918267 https://pxhere.com/en/photo/722779 https://pxhere.com/en/photo/1402258 https://pxhere.com/en/photo/1188450 https://pxhere.com/en/photo/1054869 https://pxhere.com/en/photo/1573331 https://pxhere.com/en/photo/1573329 https://pxhere.com/en/photo/1629588 https://pxhere.com/en/photo/285 https://pxhere.com/en/photo/818653 https://pxhere.com/en/photo/399720 https://pxhere.com/en/photo/661976 License: CC0 License Source: https://stocksnap.io/license https://stocksnap.io/photo/parkinggarage-parkingspaces-8U9IMYL2CQ https://stocksnap.io/photo/woman-smartphone-MLEPUKHYUU https://stocksnap.io/photo/business-man-DAAZROYMQN https://stocksnap.io/photo/business-man-XTVALHTBUK https://stocksnap.io/photo/senior-business-UTEZRDTKPP https://stocksnap.io/photo/business-man-IVZBYWKEFM https://stocksnap.io/photo/older-businessman-5BRQF1DZ8W Slick Author: Ken Wheeler License: MIT Source: Website: http://kenwheeler.github.io Docs: http://kenwheeler.github.io/slick Repo: http://github.com/kenwheeler/slick Issues: http://github.com/kenwheeler/slick/issues Blueimp Author: Sebastian Tschan License: MIT Source: Website: https://blueimp.github.io/Gallery/ Docs: https://github.com/blueimp/Gallery/blob/master/README.md Repo: https://github.com/blueimp/Gallery Issues: https://github.com/blueimp/Gallery/issues Confirm Author: Boniface Pereira License: MIT Source: Website: https://craftpip.github.io/jquery-confirm/ Docs: https://craftpip.github.io/jquery-confirm/ Repo: https://github.com/craftpip/jquery-confirm Issues: https://github.com/craftpip/jquery-confirm/issues Confirm Author: Ion.RangeSlider License: MIT Source: Website: http://ionden.com/a/plugins/ion.rangeSlider Docs: http://ionden.com/a/plugins/ion.rangeSlider/start.html Repo: https://github.com/IonDen/ion.rangeSlider Issues: https://github.com/IonDen/ion.rangeSlider/issues

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C