Shamalli

Products

ProductCVEsExploitedLatest
Web Directory Free6–Aug 13, 2026
Web 2.0 Directory plugin for WordPress1–Oct 31, 2026

Exploited and recent CVEs

  • CVE-2026-15272 Medium 6.5 Web 2.0 Directory <= 2.10.12 - Unauthenticated SQL Injection via 'w2dc_level_filter' Parameter 0.3%
  • CVE-2026-28142 Critical 9.3 WordPress Web Directory Free plugin <= 1.7.13 - SQL Injection vulnerability 0.4%
  • CVE-2025-69018 Medium 6.5 WordPress Web Directory Free plugin <= 1.7.12 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2025-39567 High 7.1 WordPress Web Directory Free plugin <= 1.7.8 - Reflected Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2025-30908 High 7.1 WordPress Web Directory Free plugin <= 1.7.6 - CSRF to Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2025-28904 Critical 9.3 WordPress Web Directory Free plugin <= 1.7.6 - SQL Injection vulnerability 0.4%
  • CVE-2024-47379 High 7.1 WordPress Web Directory Free plugin <= 1.7.3 - Reflected Cross Site Scripting (XSS) vulnerability 0.3%