~/products/listingthemes/wp_directory_kit

pipeline liveDigest Docs

Listingthemes Wp Directory Kit vulnerabilities

1 known vulnerability affecting listingthemes/wp_directory_kit.

Total CVEs

1

CISA KEV

0

Public exploits

1

Exploited in wild

1

Severity breakdown

CRITICAL1

Vulnerabilities

SortPage 1 of 1

CVE-2025-13390P1CRITICALCVSS 9.8ExploitedPoC≥ 1.4.0, ≤ 1.4.42025-12-03

CVE-2025-13390 [CRITICAL] CWE-303 CVE-2025-13390: The WP Directory Kit plugin for WordPress is vulnerable to authentication bypass in all versions up The WP Directory Kit plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 1.4.4 due to incorrect implementation of the authentication algorithm in the "wdk_generate_auto_login_link" function. This is due to the feature using a cryptographically weak token generation mechanism. This makes it possible for

Listingthemes Wp Directory Kit vulnerabilities | cvebase