{"affected":[{"defaultStatus":"unaffected","product":"WP Directory Kit","source":"CNA: WPScan","vendor":"Unknown","versions":[{"lessThan":"1.6.3","status":"affected","version":"0","versionType":"semver"}]}],"cveId":"CVE-2026-118420","cwes":["CWE-89"],"description":"The WP Directory Kit WordPress plugin before 1.6.3 does not sanitise and escape a parameter before using it in a SQL statement, making it possible for users holding the WP Directory Kit WordPress plugin before 1.6.3's custom Listing Admin role, and above, to perform SQL injection attacks.","epss":null,"exploits":[{"kind":"exploit","source":"CNA: WPScan","url":"https://wpscan.com/vulnerability/32ef59c1-624c-4a66-9b02-64e730022fc2/"}],"kev":null,"metrics":[],"modifiedAt":1794376808847,"publishedAt":1794376808847,"references":[{"source":"CNA: WPScan","tags":["exploit","vdb-entry","technical-description"],"url":"https://wpscan.com/vulnerability/32ef59c1-624c-4a66-9b02-64e730022fc2/"}],"remediation":[],"revision":"36d2943b5432a0e7d419d8b05306329d27b7da62b049180cbdb4be8c8f574a4e","sources":[{"modifiedAt":1794376808847,"name":"CNA: WPScan","retrievedAt":1794377374926,"url":"https://www.cve.org/CVERecord?id=CVE-2026-118420"}],"ssvc":null,"status":"published","title":"WP Directory Kit < 1.6.3 - Listing Admin+ SQL Injection via 'main_field' Parameter","updatedAt":1794377374926}