Unrated severityNVD Advisory· Published Jul 9, 2024· Updated Apr 28, 2026
WordPress WPDirectoryKit plugin <= 1.3.6 - HTML Injection vulnerability
CVE-2024-37253
Description
Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') vulnerability in WpDirectoryKit WP Directory Kit allows Code Injection.This issue affects WP Directory Kit: from n/a through 1.3.6.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2<=1.3.6+ 1 more
- (no CPE)range: <=1.3.6
- (no CPE)range: n/a
Patches
Vulnerability mechanics
References
1News mentions
0No linked articles in our index yet.