WordPress Plugin Vulnerabilities

WP Directory Kit <= 1.5.7 - Contributor+ Non-Public Listing Field Disclosure via Shortcodes

Description

The plugin does not check authorization or listing visibility in one of its shortcodes, allowing users with a role as low as Contributor to disclose non-public listing content, including password-protected and hidden fields, belonging to other users.

Proof of Concept

Affects Plugins

Plugin icon
wpdirectorykit
No known fix

References

CVE
CVE-2026-16592

Classification

Type
SENSITIVE DATA DISCLOSURE
OWASP top 10
A3: Sensitive Data Exposure
CWE
CWE-200
CVSS
3.1 (low)

Miscellaneous

Original Researcher
Yaswanth Reddy Sunkara
Submitter
Yaswanth Reddy Sunkara
Verified
Yes
WPVDB ID
aed24421-3bc6-4b36-bb61-d842d40d7c3c

Timeline

Publicly Published
2026-09-12 (about 2 days ago)
Added
2026-09-05 (about 9 days ago)
Last Updated
2026-09-05 (about 9 days ago)

Other

Published
Title
Published
2025-09-03
Title
Klarna Order Management for WooCommerce < 1.9.9 - Shop Manager+ Information Disclosure
Published
2022-09-22
Title
Customer Reviews for WooCommerce < 5.3.6 - Unauthenticated Sensitive Information Disclosure
Published
2025-01-16
Title
Moving Users < 1.10 - Unauthenticated Sensitive Information Exposure
Published
2024-02-02
Title
Total Upkeep < 1.15.9 - Improper Authorization to Unauthenticated Arbitrary File Download
Published
2026-06-17
Title
Appointment Booking Calendar < 1.4.02 - Authenticated (Contributor+) Sensitive Information Exposure via 'id' Parameter