A vulnerability classified as critical has been found in WP Directory Kit Plugin up to 1.4.6 on WordPress. The affected element is an unknown function. This manipulation of the argument Search causes sql injection.
This vulnerability is registered as CVE-2025-13090. Remote exploitation of the attack is possible. No exploit is available.
