Access violation vulnerability in WP Directory Kit 1.1.9

The WP Directory Kit plugin for WordPress is a vulnerable program that could be exploited by attackers. In versions up to and including 1.1.9, attackers can use a function called ‘wdk_public_action’ to include and execute arbitrary files on the server. This means that attackers can bypass access controls, obtain confidential data, and even execute code if they can upload images or other files that are thought to be safe.