Missing Authorization Vulnerability in WP Directory Kit by Patchstack

CVE-2025-60120

What is CVE-2025-60120?

The WP Directory Kit plugin for WordPress suffers from a missing authorization vulnerability that allows attackers to exploit incorrectly configured access control security levels. This flaw affects all versions from n/a to 1.3.8, potentially leading to unauthorized access to sensitive data and functionalities within the plugin. Proper measures should be implemented to ensure secure access controls and to protect user data from exploitation.

References