Advisories · Technology

Shamalli Web 2.0 Directory plugin for WordPress.

Every CVE that names Shamalli Web 2.0 Directory plugin for WordPress among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-15272 CVE record

CVSS 6.5 Medium

Web 2.0 Directory <= 2.10.12 - Unauthenticated SQL Injection via 'w2dc_level_filter' Parameter
- Shamalli Web 2.0 Directory plugin for WordPress
- SQL injection
Not analysed yet 31 Oct 2026