Shamalli vulnerabilities
7 published CVEs name Shamalli among the affected products.
- 7Published CVEs7 of them scored
- 3Last 12 monthspublished in the last year
- 2Critical3 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-15272
Web 2.0 Directory <= 2.10.12 - Unauthenticated SQL Injection via 'w2dc_level_filter' Parameter
Shamalli · Web 2.0 Directory plugin for WordPress
Medium6.5 - CVE-2026-28142
WordPress Web Directory Free plugin <= 1.7.13 - SQL Injection vulnerability
Shamalli · Web Directory Free
Critical9.3 - CVE-2025-69018
WordPress Web Directory Free plugin <= 1.7.12 - Cross Site Scripting (XSS) vulnerability
Shamalli · Web Directory Free
Medium6.5 - CVE-2025-39567
WordPress Web Directory Free plugin <= 1.7.8 - Reflected Cross Site Scripting (XSS) vulnerability
Shamalli · Web Directory Free
High7.1 - CVE-2025-30908
WordPress Web Directory Free plugin <= 1.7.6 - CSRF to Cross Site Scripting (XSS) vulnerability
Shamalli · Web Directory Free
High7.1 - CVE-2025-28904
WordPress Web Directory Free plugin <= 1.7.6 - SQL Injection vulnerability
Shamalli · Web Directory Free
Critical9.3 - CVE-2024-47379
WordPress Web Directory Free plugin <= 1.7.3 - Reflected Cross Site Scripting (XSS) vulnerability
Shamalli · Web Directory Free
High7.1