Nxploited/CVE-2025-13390

PoC

WP Directory Kit <= 1.4.4 - Authentication Bypass to Privilege Escalation via Account Takeover

view exploit source poc_in_githubauthor Nxploitedpublished 2026-01-05catalog poc_in_github

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2025-13390US	critical9.8	4.55% (92nd)	Exploit	2025-12-03
The WP Directory Kit plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 1.4.4 due to incorrect implementation of the authentication a…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.