NVD HIGH: CVE-2026-14785 — The Web Directory Free plugin for WordPress is vulnerable to generic SQL Injecti...

Tuesday, July 28, 2026 at 10:16 AM UTC·Source: NIST NVD

Updated: Tuesday, July 28, 2026 at 11:00 AM UTC

Executive Summary

The Web Directory Free plugin for WordPress is vulnerable to generic SQL Injection via the 'levels' parameter in all versions up to, and including, 1.7.13 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that ca

Analysis

Indicators of Compromise (1)

CVE (1)

CVE-2026-14785

NVD MITRE CVE

Source Attribution

Originally published by NIST NVD on Jul 28, 2026. Verified by: NIST.

Related Threats

MEDIUMVulnerabilityNEW

Standard Chartered names CTO for India and South Asia

UK bank Standard Chartered has bolstered its executive team in Asia after appointing Kavita Kulkami as chief technology and operations officer for India and South Asia

39m agoFinextra

MEDIUMVulnerabilityNEW

Pemo secures approval in UAE to expand payments offering

Pemo, the UAE's leading all-in-one spend management platform built for small and medium-sized businesses (SMEs), today announced that it has received in-principle approval from the Central Bank of the UAE (CBUAE) for a Stored Value Facilities (SVF) licence.

53m agoFinextra

MEDIUMVulnerability

Axon Is Another License Plate Surveillance Company

Governments are switching, but I’m not sure it makes a difference : …some municipalities, including Denver, Colorado, are ditching their Flock arrays. But keep in mind that if they’re only switching from Flock to another brand of license-plate readers, like Axon, it’s like a gambling addict trying to kick the habit by switching from FanDuel to DraftKings. […] Despite

1h agoSchneier on Security