Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

7 records

Vendor: Shamalli Clear all filters
TI-2026-83542 CVE-2026-15272 · GHSA-gxv8-xvj3-3gm9

Web 2.0 Directory <= 2.10.12 - Unauthenticated SQL Injection via 'w2dc_level_filter' Parameter

Priority LOW 29

The Web 2.0 Directory plugin for WordPress is vulnerable to time-based SQL Injection via the 'w2dc_level_filter' parameter in all versions up to, and including, 2.10.12 due to insufficient escaping on the user supplied p…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.0032 Published 2026-10-31 No fix listed CWE-89
TI-2025-42473 CVE-2025-69018 · GHSA-vc28-3php-xh48

WordPress Web Directory Free plugin <= 1.7.12 - Cross Site Scripting (XSS) vulnerability

Priority LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Shamalli Web Directory Free web-directory-free allows DOM-Based XSS.This issue affects Web Directory Free: from n/a th…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00159 Published 2025-12-30 No fix listed CWE-79
TI-2025-26309 CVE-2025-39567 · GHSA-p2qr-9r96-6m43

WordPress Web Directory Free plugin <= 1.7.8 - Reflected Cross Site Scripting (XSS) vulnerability

Priority LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Shamalli Web Directory Free web-directory-free allows Reflected XSS.This issue affects Web Directory Free: from n/a th…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00237 Published 2025-04-17 No fix listed CWE-79
TI-2025-20847 CVE-2025-28904 · GHSA-xxp6-fq36-p8jx

WordPress Web Directory Free plugin <= 1.7.6 - SQL Injection vulnerability

Priority MEDIUM 46

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Shamalli Web Directory Free web-directory-free allows Blind SQL Injection.This issue affects Web Directory Free: from…

CVSS 3.1CRITICAL 9.3 Network No auth No interaction EPSS 0.00363 Published 2025-03-25 No fix listed CWE-89
TI-2024-31697 CVE-2024-47379 · GHSA-xhr5-q8cq-g8ch

WordPress Web Directory Free plugin <= 1.7.3 - Reflected Cross Site Scripting (XSS) vulnerability

Priority LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Shamalli Web Directory Free web-directory-free allows Reflected XSS.This issue affects Web Directory Free: from n/a th…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.0032 Published 2024-10-05 No fix listed CWE-79