Vendor

    Shamalli

    7 known vulnerabilities in products by Shamalli, 0 of them actively exploited (CISA KEV).

    Key figures

    7

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    2

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Shamalli
    CriticalCVE-2026-28142

    WordPress Web Directory Free plugin <= 1.7.13 - SQL Injection vulnerability

    		9.3
    MediumCVE-2026-15272

    Web 2.0 Directory <= 2.10.12 - Unauthenticated SQL Injection via 'w2dc_level_filter' Parameter

    		6.5
    CriticalCVE-2025-28904

    WordPress Web Directory Free plugin <= 1.7.6 - SQL Injection vulnerability

    		9.3
    HighCVE-2024-47379

    WordPress Web Directory Free plugin <= 1.7.3 - Reflected Cross Site Scripting (XSS) vulnerability

    		7.1
    HighCVE-2025-39567

    WordPress Web Directory Free plugin <= 1.7.8 - Reflected Cross Site Scripting (XSS) vulnerability

    		7.1
    MediumCVE-2025-69018

    WordPress Web Directory Free plugin <= 1.7.12 - Cross Site Scripting (XSS) vulnerability

    		6.5
    HighCVE-2025-30908

    WordPress Web Directory Free plugin <= 1.7.6 - CSRF to Cross Site Scripting (XSS) vulnerability

    		7.1

    Products

    Products by Shamalli
    Web Directory Free60