TI-2026-70358 CVE-2026-42719 · GHSA-qprx-44xp-w3rc
PHP object injection in WordPress Dynamic User Directory plugin
Priority MEDIUM 49
Subscriber PHP Object Injection in Dynamic User Directory <= 2.4 versions.
No Sarah Giles vulnerabilities are listed in CISA KEV.
3 records
Subscriber PHP Object Injection in Dynamic User Directory <= 2.4 versions.
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Sarah Giles Dynamic User Directory dynamic-user-directory allows Blind SQL Injection.This issue affects Dynamic User D…
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Sarah Giles Dynamic User Directory dynamic-user-directory allows Stored XSS.This issue affects Dynamic User Directory:…