WordPress - WP Directory Kit - CRITICAL - CVE-2026-39531. An SQL Injection vulnerability exists in the WP Directory Kit plugin, enabling attackers to exploit improper neutralization of special elements in SQL commands. This flaw allows for Blind SQL Injection, potentially leading to unauthorized access to database information. Users of WP Directory Kit versions from n/a to 1.5.0 are advised to take immediate preventive measures.