Shamalli vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Shamalli products: 2 record(s), with severity, exploitation and fixes.

Web Directory Free 2

Exploited only (KEV) →

CVE-2026-28142 Critical · 9.3 CWE-89 Aug 13, 2026

WordPress Web Directory Free plugin <= 1.7.13 - SQL Injection vulnerability

Unauthenticated SQL Injection in Web Directory Free <= 1.7.13 versions.

CVE-2025-69018 Medium · 6.5 CWE-79 Dec 30, 2025

WordPress Web Directory Free plugin <= 1.7.12 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Shamalli Web Directory Free web-directory-free allows DOM-Based XSS.This issue affects Web Directory Free: from n/a through <= 1.7.12.