Vulnerabilities in Shamalli

7 results

CVE-2026-28142CRITICALWordPress Web Directory Free plugin <= 1.7.13 - SQL Injection vulnerabilityEPSS 0.4%CVE-2025-28904CRITICALWordPress Web Directory Free plugin <= 1.7.6 - SQL Injection vulnerabilityEPSS 0.4%CVE-2024-47379HIGHWordPress Web Directory Free plugin <= 1.7.3 - Reflected Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2026-15272MEDIUMWeb 2.0 Directory <= 2.10.12 - Unauthenticated SQL Injection via 'w2dc_level_filter' ParameterEPSS 0.3%CVE-2025-39567HIGHWordPress Web Directory Free plugin <= 1.7.8 - Reflected Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2025-69018MEDIUMWordPress Web Directory Free plugin <= 1.7.12 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2025-30908HIGHWordPress Web Directory Free plugin <= 1.7.6 - CSRF to Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%