Shamalli vulnerabilities

Products

• Web Directory Free 11

Newest

• shamalli web 2.0 directory plugin for wordpress Web 2.0 Directory <= 2.10.12 - Unauthenticated SQL Injection via 'w2dc_level_filter' Parameter CVE-2026-15272 6.5 MediumOctober 31, 2026
• shamalli web directory free WordPress Web Directory Free plugin <= 1.7.13 - SQL Injection vulnerability CVE-2026-28142 9.3 CriticalAugust 13, 2026
• mihail-chepovskiy web directory free Web Directory Free <= 1.7.13 - Unauthenticated SQL Injection CVE-2026-14785 7.5 HighJuly 28, 2026
• shamalli web directory free WordPress Web Directory Free plugin <= 1.7.12 - Cross Site Scripting (XSS) vulnerability CVE-2025-69018 6.5 MediumDecember 30, 2025
• shamalli web directory free WordPress Web Directory Free plugin <= 1.7.8 - Reflected Cross Site Scripting (XSS) vulnerability CVE-2025-39567 7.1 HighApril 17, 2025
• shamalli web directory free WordPress Web Directory Free plugin <= 1.7.6 - CSRF to Cross Site Scripting (XSS) vulnerability CVE-2025-30908 7.1 HighApril 3, 2025
• shamalli web directory free WordPress Web Directory Free plugin <= 1.7.6 - SQL Injection vulnerability CVE-2025-28904 9.3 CriticalMarch 25, 2025
• shamalli web directory free WordPress Web Directory Free plugin <= 1.7.3 - Reflected Cross Site Scripting (XSS) vulnerability CVE-2024-47379 7.1 HighOctober 5, 2024
• salephpscripts web directory free Web Directory Free < 1.7.3 - Unauthenticated LFI CVE-2024-3673 Public exploit 9.1 CriticalAugust 30, 2024
• salephpscripts web directory free Web Directory Free < 1.7.2 - Reflected XSS CVE-2024-3669 6.8 MediumJuly 30, 2024
• salephpscripts web directory free Web Directory Free < 1.7.0 - Unauthenticated SQL Injection CVE-2024-3552 Public exploit EPSS 67.1% 9.8 CriticalJune 13, 2024
• mihail-chepovskiy web directory free Web Directory Free <= 1.6.8 - Authenticated (Contributor+) SQL Injection via post_id CVE-2023-2201 8.8 HighJune 2, 2023