CVE-2026-27538

The WP Directory Kit versions up to 1.5.4 are vulnerable to an unauthenticated SQL injection, allowing attackers to manipulate database queries and potentially access sensitive information. This high-severity vulnerability poses a significant risk to any organization using this plugin, particularly those with exposed web applications. Administrators should prioritize patching or upgrading to mitigate the risk of exploitation.