SecvalisbySYSDEVOPS.EU
CVE Catalog
EnglishPolski

CVE-2026-66649

CriticalCVSS 9.3
Published: Updated: Translated: NVD NIST

Summary

Unauthenticated SQL Injection vulnerability in Directory Pro versions up to 2.5.8. An attacker can manipulate database queries.

Risk Assessment

Risk of unauthorized access to data, modification or deletion, and potential administrator account takeover.

Recommendation

Update the Directory Pro plugin to the latest version that includes the security fix.

Other vulnerabilities in Directory Pro

Original NVD description (English source)

Unauthenticated SQL Injection in Directory Pro <= 2.5.8 versions.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS