Listingthemes vulnerabilities
We track 2 vulnerabilities in Listingthemes products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on December 3, 2025.
2vulnerabilities
1critical
1high
0exploited
9.3average CVSS score
Latest Listingthemes vulnerabilities
- 9.8 Critical severity
WP Directory Kit: Incorrect Implementation of Authentication Algorithm
The WP Directory Kit plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 1.4.4 due to incorrect implementation of the authentication algorithm in the "wdk_generate_auto_login_link" function. This is due to the feat
- 8.8 High severity
WP Directory Kit: Improper Neutralization of Special Elements used in an SQL Command
The WP Directory Kit plugin for WordPress is vulnerable to SQL Injection via the 'attribute_value' and 'attribute_id' parameters in all versions up to, and including, 1.3.0 due to insufficient escaping on the user supplied parameter and lack of sufficient prep