Read the docs

Shamalli

Records7All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9

Exploited now

Shamalli records in CISA KEV

No Shamalli vulnerabilities are listed in CISA KEV.

Records

7 records

TI-2025-20847 CVE-2025-28904 · GHSA-xxp6-fq36-p8jx

WordPress Web Directory Free plugin <= 1.7.6 - SQL Injection vulnerability

Priority MEDIUM 46

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Shamalli Web Directory Free web-directory-free allows Blind SQL Injection.This issue affects Web Directory Free: from…

CVSS 3.1CRITICAL 9.3 Network No auth No interaction EPSS 0.00363 Published 2025-03-25 No fix listed CWE-89
TI-2025-26309 CVE-2025-39567 · GHSA-p2qr-9r96-6m43

WordPress Web Directory Free plugin <= 1.7.8 - Reflected Cross Site Scripting (XSS) vulnerability

Priority LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Shamalli Web Directory Free web-directory-free allows Reflected XSS.This issue affects Web Directory Free: from n/a th…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00237 Published 2025-04-17 No fix listed CWE-79
TI-2024-31697 CVE-2024-47379 · GHSA-xhr5-q8cq-g8ch

WordPress Web Directory Free plugin <= 1.7.3 - Reflected Cross Site Scripting (XSS) vulnerability

Priority LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Shamalli Web Directory Free web-directory-free allows Reflected XSS.This issue affects Web Directory Free: from n/a th…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.0032 Published 2024-10-05 No fix listed CWE-79
TI-2026-83542 CVE-2026-15272 · GHSA-gxv8-xvj3-3gm9

Web 2.0 Directory <= 2.10.12 - Unauthenticated SQL Injection via 'w2dc_level_filter' Parameter

Priority LOW 29

The Web 2.0 Directory plugin for WordPress is vulnerable to time-based SQL Injection via the 'w2dc_level_filter' parameter in all versions up to, and including, 2.10.12 due to insufficient escaping on the user supplied p…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.0032 Published 2026-10-31 No fix listed CWE-89
TI-2025-42473 CVE-2025-69018 · GHSA-vc28-3php-xh48

WordPress Web Directory Free plugin <= 1.7.12 - Cross Site Scripting (XSS) vulnerability

Priority LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Shamalli Web Directory Free web-directory-free allows DOM-Based XSS.This issue affects Web Directory Free: from n/a th…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00159 Published 2025-12-30 No fix listed CWE-79
Open these records in search →