Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Wp Directory Kit WP Directory Kit allows Blind SQL Injecti…

A Blind SQL Injection vulnerability has been identified in the WP Directory Kit WordPress plugin. The vulnerability stems from improper neutralization of special elements used in SQL commands. This security flaw affects WP Directory Kit versions from unknown starting point through version 1.5.1. The vulnerability allows attackers to perform blind SQL injection attacks against affected WordPress installations. This could potentially lead to unauthorized database access and data extraction. Users of WP Directory Kit should update to a patched version when available.