wpdirectorykit.com — Vulnerabilities & Security Advisories 3

Wpdirectorykit.com is a WordPress plugin designed to create and manage directory listings, commonly used for business directories or member directories. Historically, the plugin has been vulnerable to multiple security issues including remote code execution (RCE), cross-site scripting (XSS), and privilege escalation vulnerabilities. These vulnerabilities often stem from insufficient input validation and improper access controls. The plugin currently has three CVEs on record, highlighting ongoing security concerns. While no major public incidents have been widely reported, the consistent appearance of critical vulnerabilities in its history suggests potential risks for users who fail to maintain updated versions of the plugin.