Known Vulnerabilities for WP Directory Kit by Unknown
Listed below are 10 of the newest known vulnerabilities associated with "WP Directory Kit" by "Unknown".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-85690 json | Plandex 2.2.1 contains a path traversal vulnerability in the ApplyFiles function that allows attackers to write files outside... | Not Provided | 2026-09-04 | 2026-09-04 |
| CVE-2026-85685 json | AgentScope through 2.0.7.post1 contains a path traversal vulnerability in LocalWorkspace.add_skill that copies arbitrary serv... | Not Provided | 2026-09-04 | 2026-09-04 |
| CVE-2026-85684 json | marker through 2.0.0 contains a path traversal vulnerability in the FastAPI /marker/upload handler that fails to sanitize the... | Not Provided | 2026-09-04 | 2026-09-04 |
| CVE-2026-85668 json | Xinference (affected commit 4a94832, v3.x) contains an unauthenticated arbitrary-path file read vulnerability in the POST /v1... | Not Provided | 2026-09-04 | 2026-09-04 |
| CVE-2026-85665 json | Bruno versions through 3.4.2 fail to validate file paths in request body declarations, allowing attackers to read arbitrary l... | Not Provided | 2026-09-04 | 2026-09-04 |
| CVE-2026-85606 json | firecrawl-mcp-server 3.20.2 contains an arbitrary local file read vulnerability in the firecrawl_parse tool that accepts unco... | Not Provided | 2026-09-04 | 2026-09-04 |
| CVE-2026-85603 json | Grav versions before 1.10.55 contain a path traversal vulnerability in the admin plugin's Save As action that fails to valida... | Not Provided | 2026-09-04 | 2026-09-04 |
| CVE-2026-85456 json | MOOS-IvP through 24.8.1 fails to properly validate variable names extracted from alog files in the SplitHandler, allowing att... | Not Provided | 2026-09-03 | 2026-09-04 |
| CVE-2026-85396 json | rubyzip versions before 3.4.0 contain a path traversal vulnerability in Zip::Entry#extract that fails to properly validate ex... | Not Provided | 2026-09-03 | 2026-09-03 |
| CVE-2026-85216 json | MISP contains an authentication bypass vulnerability in its LDAP and LinOTP authentication components due to insufficient val... | Not Provided | 2026-09-03 | 2026-09-03 |