Shamalli
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Web Directory Free | 6 | – | Aug 13, 2026 |
| Web 2.0 Directory plugin for WordPress | 1 | – | Oct 31, 2026 |
Exploited and recent CVEs
- CVE-2026-15272 Web 2.0 Directory <= 2.10.12 - Unauthenticated SQL Injection via 'w2dc_level_filter' Parameter 0.3%
- CVE-2026-28142 WordPress Web Directory Free plugin <= 1.7.13 - SQL Injection vulnerability 0.4%
- CVE-2025-69018 WordPress Web Directory Free plugin <= 1.7.12 - Cross Site Scripting (XSS) vulnerability 0.2%
- CVE-2025-39567 WordPress Web Directory Free plugin <= 1.7.8 - Reflected Cross Site Scripting (XSS) vulnerability 0.2%
- CVE-2025-30908 WordPress Web Directory Free plugin <= 1.7.6 - CSRF to Cross Site Scripting (XSS) vulnerability 0.2%
- CVE-2025-28904 WordPress Web Directory Free plugin <= 1.7.6 - SQL Injection vulnerability 0.4%
- CVE-2024-47379 WordPress Web Directory Free plugin <= 1.7.3 - Reflected Cross Site Scripting (XSS) vulnerability 0.3%