Known vulnerabilities in WP Directory Kit
Build your Directory portal, demos for Real Estate Agency and Car Dealership included
33Reported vulnerabilities
9.8Highest CVSS score
1.5.7Latest version
2,000+Active installs
What to do now
Update WP Directory Kit to 1.5.7 or later.
33 of these have a fixed version available. Updating resolves them.
Reported vulnerabilities
| CVE | Severity | Exploit probability |
Affected versions | Fixed in | Published |
|---|---|---|---|---|---|
| CVE-2025-13390 | Critical | 4.6% | 1.4.4 and earlier | 1.4.5 |
December 3, 2025 |
| CVE-2023-2278 | Critical | 1.7% | Before 1.2.0 | 1.2.0 |
June 13, 2023 |
| CVE-2023-2835 | Medium | 0.7% | 1.2.3 and earlier | 1.2.4 |
June 2, 2023 |
| CVE-2024-3217 | High | 1.9% | Before 1.3.1 | 1.3.1 |
April 5, 2024 |
| CVE-2023-2277 | Medium | 0.3% | Before 1.2.0 | 1.2.0 |
June 13, 2023 |
| CVE-2023-2351 | Medium | 0.6% | Before 1.2.4 | 1.2.4 |
June 13, 2023 |
| CVE-2025-13138 | High | 1.5% | 0 to 1.4.3 (inclusive) | 1.4.4 |
November 21, 2025 |
| CVE-2026-28001 | High | 0.3% | 1.5.4 and earlier | 1.5.5 |
August 12, 2026 |
| CVE-2026-18474 | High | 0.3% | 1.5.5 and earlier | 1.5.6 |
August 10, 2026 |
| CVE-2026-18473 | High | 0.3% | 1.5.4 and earlier | 1.5.5 |
August 3, 2026 |
| CVE-2026-42672 | High | 0.2% | 1.5.1 and earlier | 1.5.2 |
May 14, 2026 |
| CVE-2026-39531 | High | 0.2% | 1.5.0 and earlier | 1.5.1 |
April 13, 2026 |
| CVE-2025-13089 | High | 0.4% | 1.4.7 and earlier | 1.4.8 |
December 12, 2025 |
| CVE-2026-18230 | Medium | 0.2% | 1.5.5 and earlier | 1.5.6 |
August 10, 2026 |
| CVE-2026-16589 | Medium | 0.2% | 1.5.4 and earlier | 1.5.5 |
August 3, 2026 |
| CVE-2025-13525 | Medium | 0.3% | 0 to 1.4.5 (inclusive) | 1.4.6 |
November 27, 2025 |
| CVE-2024-37487 | Medium | 0.3% | 1.3.5 and earlier | 1.3.6 |
July 4, 2024 |
| CVE-2024-29774 | Medium | 0.4% | 1.2.9 and earlier | 1.3.0 |
March 25, 2024 |
| CVE-2026-27538 | Medium | 0.2% | 1.5.4 and earlier | 1.5.5 |
August 11, 2026 |
| CVE-2025-13920 | Medium | 0.7% | 0 to 1.4.9 (inclusive) | 1.5.0 |
January 24, 2026 |
| CVE-2023-41875 | Medium | 0.6% | 1.2.6 and earlier | 1.2.7 |
September 5, 2023 |
| CVE-2023-2279 | Medium | 0.3% | Before 1.2.2 | 1.2.2 |
August 31, 2023 |
| CVE-2023-2280 | Medium | 0.6% | Before 1.2.3 | 1.2.3 |
June 9, 2023 |
| CVE-2023-31229 | Medium | 0.3% | 1.1.9 and earlier | 1.2.0 |
April 27, 2023 |
| CVE-2026-18231 | Medium | 0.3% | Before 1.5.7 | 1.5.7 |
August 21, 2026 |
| CVE-2026-39534 | Medium | 0.3% | 1.5.0 and earlier | 1.5.1 |
April 8, 2026 |
| CVE-2025-60120 | Medium | 0.3% | 1.4.0 and earlier | 1.4.1 |
September 26, 2025 |
| CVE-2026-18653 | Medium | 0.3% | Before 1.5.7 | 1.5.7 |
August 20, 2026 |
| CVE-2025-13090 | Medium | 0.3% | 1.4.6 and earlier | 1.4.7 |
December 1, 2025 |
| CVE-2026-16594 | Medium | 0.2% | 1.5.4 and earlier | 1.5.5 |
August 3, 2026 |
| CVE-2026-16595 | Medium | 0.2% | 1.5.4 and earlier | 1.5.5 |
August 3, 2026 |
| CVE-2026-16590 | Medium | 0.2% | 1.5.4 and earlier | 1.5.5 |
August 3, 2026 |
| CVE-2024-37253 | Low | 0.3% | 1.3.6 and earlier | 1.3.7 |
June 26, 2024 |