CVE-2025-39567highCWE-79

CVE-2025-39567: falha de alta gravidade em Shamalli Web Directory Free

WordPress Web Directory Free plugin <= 1.7.8 - Reflected Cross Site Scripting (XSS) vulnerability

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar Web Directory Free

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

21Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 7.1epss 0.2%
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Shamalli Web Directory Free web-directory-free allows Reflected XSS.This issue affects Web Directory Free: from n/a through <= 1.7.8.
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L
Produtos afetados
Shamalli · Web Directory Free
CVEs relacionadas — Shamalli Web Directory Free

No mesmo produto, das mais perigosas para as menos.

CVE-2026-28142CRITICALWordPress Web Directory Free plugin <= 1.7.13 - SQL Injection vulnerabilityEPSS 0.4%CVE-2025-28904CRITICALWordPress Web Directory Free plugin <= 1.7.6 - SQL Injection vulnerabilityEPSS 0.4%CVE-2024-47379HIGHWordPress Web Directory Free plugin <= 1.7.3 - Reflected Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2025-69018MEDIUMWordPress Web Directory Free plugin <= 1.7.12 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2025-30908HIGHWordPress Web Directory Free plugin <= 1.7.6 - CSRF to Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%