CyberRota Analysis
AI-GeneratedThe WP Directory Kit plugin for WordPress versions prior to 1.5.5 is vulnerable to SQL injection due to inadequate sanitization and escaping of parameters in authenticated AJAX actions, which also lack proper authorization and nonce checks. This vulnerability allows any authenticated user, including those with minimal privileges like Subscribers, to execute malicious SQL queries, potentially compromising the database. WordPress administrators and security teams should prioritize this issue to mitigate the risk of unauthorized data access or manipulation.
Original NVD Description
The WP Directory Kit WordPress plugin before 1.5.5 does not sanitize and escape a parameter before using it in a SQL statement through one of its authenticated AJAX actions, which lacks authorization and nonce checks, allowing any authenticated user such as a Subscriber to perform SQL injection attacks.