Skip to content
OpenAdvisories

Vendor

Shamalli

7 known vulnerabilities.

Products

Web Directory Free 6 Web 2.0 Directory plugin for WordPress 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.5
    CVE-2026-15272

    Web 2.0 Directory <= 2.10.12 - Unauthenticated SQL Injection via 'w2dc_level_filter' Parameter

    The Web 2.0 Directory plugin for WordPress is vulnerable to time-based SQL Injection via the 'w2dc_level_filter' parameter in all versions up to, and including, 2.10.12 due to insufficient escaping on the user supplied parameter and lack of sufficient prepara…

    Shamalli Web 2.0 Directory plugin for WordPress Web / CMS
  • Medium 6.5
    CVE-2025-69018

    WordPress Web Directory Free plugin <= 1.7.12 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Shamalli Web Directory Free web-directory-free allows DOM-Based XSS.This issue affects Web Directory Free: from n/a through <= 1.7.12.

    Shamalli Web Directory Free