CVE-2026-18231

Deferred Deferred - Pending Action

Unauthenticated User Data Exposure in WP Directory Kit

Publication date: 2026-08-19

Last updated on: 2026-08-26

Assigner: WPScan

Description

The WP Directory Kit WordPress plugin before 1.5.7 does not perform any authorization check on one of its public AJAX actions and returns unfiltered database rows, allowing unauthenticated attackers to retrieve the usernames and email addresses of users holding the WP Directory Kit WordPress plugin before 1.5.7's own roles.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-19

Last Modified

2026-08-26

Generated

2026-09-08

AI Q&A

2026-08-19

EPSS Evaluated

2026-09-07

NVD

CVE-2026-18231

EUVD

EUVD-2026-62279

Affected Vendors & Products

Vendor	Product	Version / Range
wp_directory_kit	wp_directory_kit	to 1.5.7 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-200	The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

Attack-Flow Graph

Executive Summary

This vulnerability affects the WP Directory Kit WordPress plugin before version 1.5.7. It allows unauthenticated attackers to access user data by exploiting a public AJAX action that lacks proper authorization checks. The flaw enables retrieval of usernames and email addresses of users with roles tied to the plugin.

Detection Guidance

To detect this vulnerability, check if the WP Directory Kit plugin version is below 1.5.7. You can use WPScan to scan your WordPress site for vulnerable plugins. Run: wpscan --url <your-site-url> --enumerate vp,vt. Alternatively, manually inspect the plugin version in the WordPress admin panel under Plugins.

Impact Analysis

Unauthenticated attackers could exploit this to steal user email addresses and usernames, potentially leading to phishing attacks, identity theft, or unauthorized access to accounts. Users of the plugin should update to version 1.5.7 or later immediately.

Compliance Impact

This vulnerability could violate data protection regulations like GDPR or HIPAA by exposing personally identifiable information (PII) without authorization. Organizations using the affected plugin may face compliance breaches, legal penalties, or reputational damage.

Mitigation Strategies

Immediately update the WP Directory Kit plugin to version 1.5.7 or later. If updating is not possible, consider disabling the plugin temporarily until an update is applied. Regularly monitor plugin updates and apply security patches promptly.

Hi! I’m here to help you understand CVE-2026-18231. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70