CRITICAL 9.3 CVE-2026-66649 Published 20 Aug 2026

Directory Pro SQL Injection

Worried this affects one of your servers?

Directory Pro, a WordPress plugin, is affected by an SQL Injection vulnerability.

Directory Pro versions up to 2.5.8 are vulnerable, allowing unauthenticated attackers to inject malicious SQL queries.