Skip to content
OpenAdvisories

Vendor

Shamalli

7 known vulnerabilities.

Products

Web Directory Free 6 Web 2.0 Directory plugin for WordPress 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.3
    CVE-2026-28142

    WordPress Web Directory Free plugin <= 1.7.13 - SQL Injection vulnerability

    Unauthenticated SQL Injection in Web Directory Free <= 1.7.13 versions.

    Shamalli Web Directory Free
  • Critical 9.3
    CVE-2025-28904

    WordPress Web Directory Free plugin <= 1.7.6 - SQL Injection vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Shamalli Web Directory Free web-directory-free allows Blind SQL Injection.This issue affects Web Directory Free: from n/a through <= 1.7.6.

    Shamalli Web Directory Free