CVE-2026-18231 — WP Directory Kit < 1.5.7 - Unauthenticated User Email Disclosure via select_2_ajax_user
The WP Directory Kit WordPress plugin before 1.5.7 does not perform any authorization check on one of its public AJAX actions and returns unfiltered database rows, allowing unau…
Published: 2026-08-19 · CVSS: 5.3 · CVSS 3.1
The WP Directory Kit WordPress plugin before 1.5.7 does not perform any authorization check on one of its public AJAX actions and returns unfiltered database rows, allowing unauthenticated attackers to retrieve the usernames and email addresses of users holding the WP Directory Kit WordPress plugin before 1.5.7's own roles.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7