Medium
CVE-2025-13090
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 40
Reset filters
Medium
CVE-2025-13525
WP Directory Kit <= 1.4.5 - Reflected Cross-Site Scripting via 'order_by' Parameter
High
CVE-2025-13138
WP Directory Kit <= 1.4.3 - Unauthenticated SQL Injection via select_2_ajax() Function
Medium
CVE-2025-60120
WP Directory Kit <= 1.4.0 - Missing Authorization
Medium
CVE-2024-37487
WP Directory Kit <= 1.3.5 - Reflected Cross-Site Scripting
Low
CVE-2024-37253
WP Directory Kit <= 1.3.6 - Authenticated (Admin+) HTML Injection
High
CVE-2024-3217
WP Directory Kit <= 1.3.0 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2024-29774
WP Directory Kit <= 1.2.9 - Reflected Cross-Site Scripting
Medium
CVE-2023-41875
WP Directory Kit <= 1.2.6 - Missing Authorization
Medium
CVE-2023-2351
WP Directory Kit <= 1.2.3 - Missing Authorization to Plugin Settings Change/Delete, Demo Import, Directory Kit Deletion via wdk_admin_action
Medium
CVE-2023-2835
WP Directory Kit <= 1.2.3 - Reflected Cross-Site Scripting via 'search'
Critical
CVE-2023-2278
WP Directory Kit <= 1.1.9 - Unauthenticated Local File Inclusion via wdk_public_action
Medium
CVE-2023-2280
WP Directory Kit <= 1.2.2 - Missing Authorization to Plugin Installation, Settings Change/Delete, Demo Import, Directory Kit Deletion via wdk_public_action
Medium
CVE-2023-2279
WP Directory Kit <= 1.2.1 - Cross-Site Request Forgery to Plugin Settings Change/Delete, Demo Import, Directory Kit Modification/Deletion via admin_page_display
Medium
CVE-2023-2277
WP Directory Kit <= 1.1.9 - Cross-Site Request Forgery to Stored Cross-Site Scripting via wdk_resultitem
Medium
CVE-2023-31229
WP Directory Kit <= 1.1.9 - Open Redirect
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.