How many Shamalli Web Directory Free CVEs are in CISA KEV?

None of Shamalli Web Directory Free's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which versions of Shamalli Web Directory Free are affected?

18 distinct Shamalli Web Directory Free versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in Shamalli Web Directory Free CVEs?

Shamalli Web Directory Free's CVEs most often map to these CWE weakness types: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-352 (Cross-Site Request Forgery (CSRF)), CWE-89 (Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')).

How many critical Shamalli Web Directory Free vulnerabilities are there?

Shamalli Web Directory Free has 1 critical and 3 high-severity CVEs.

What is the average severity of Shamalli Web Directory Free CVEs?

The average CVSS base score across Shamalli Web Directory Free's scored CVEs is 7.4.

RadicalNotion.AI

Log in Start free

Log in

Log in Start free

Shamalli

5 CVEs

Shamalli Web Directory Free Vulnerabilities

Name: Shamalli Web Directory Free vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for Web Directory Free by Shamalli.

5

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

0

Public exploits

PoC or exploit code

7.4

Avg CVSS

2024–2025

Last updated December 30, 2025

Overview

Shamalli Web Directory Free has 5 published CVE records since 2024, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 0 have a known public exploit. The average CVSS base score across scored CVEs is 7.4.

This page aggregates every publicly disclosed vulnerability (CVE) affecting Shamalli Web Directory Free, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.

Severity and exploitation

How the CVSS severity of Shamalli Web Directory Free's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical1

High3

Medium1

Low0

In CISA’s Known Exploited Vulnerabilities catalog

0

None of Shamalli Web Directory Free's CVEs are currently listed in CISA's KEV catalog.

Public exploits

0

No Shamalli Web Directory Free CVEs currently have a tracked public exploit.

Affected versions and CVEs

Browse every Shamalli Web Directory Free version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

<= 1.7.62 CVEs
<= 1.7.121 CVE
<= 1.7.31 CVE
<= 1.7.81 CVE
>= 1.7.131 CVE
>= 1.7.41 CVE
>= 1.7.71 CVE
>= 1.7.81 CVE
>= 1.7.91 CVE

Fixed in

> 1.7.62 CVEs
> 1.7.121 CVE
> 1.7.31 CVE
> 1.7.81 CVE
1.7.131 CVE
1.7.41 CVE
1.7.71 CVE
1.7.81 CVE
1.7.91 CVE

Find a version

5 CVEs

Sort

WordPress Web Directory Free plugin <= 1.7.12 - Cross Site Scripting (XSS) vulnerability
CVE-2025-69018
Patch
CWE-79
Medium · CVSS 6.5
EPSS 0.1% (3th pct)2025-12-30
WordPress Web Directory Free plugin <= 1.7.8 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-39567
Patch
CWE-79
High · CVSS 7.1
EPSS 0.2% (13th pct)2025-04-17
WordPress Web Directory Free plugin <= 1.7.6 - CSRF to Cross Site Scripting (XSS) vulnerability
CVE-2025-30908
Patch
CWE-352
High · CVSS 7.1
EPSS 0.1% (4th pct)2025-04-03
WordPress Web Directory Free plugin <= 1.7.6 - SQL Injection vulnerability
CVE-2025-28904
Patch
CWE-89
Critical · CVSS 9.3
EPSS 0.3% (26th pct)2025-03-25
WordPress Web Directory Free plugin <= 1.7.3 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2024-47379
Patch
CWE-79
High · CVSS 7.1
EPSS 0.3% (23th pct)2024-10-05

Common weakness types

The CWE weakness categories most often found in Shamalli Web Directory Free CVEs. Follow any weakness for its full explanation.

Disclosure activity by year

How many Shamalli Web Directory Free CVEs were published each year.

2024

1

2025

4

Other Shamalli products

Browse vulnerabilities for other products by Shamalli.

All Shamalli vulnerabilities

Frequently asked questions

Common questions about Shamalli Web Directory Free vulnerabilities.

How many CVEs does Shamalli Web Directory Free have?: Shamalli Web Directory Free has 5 published CVE records since 2024.
How many Shamalli Web Directory Free CVEs are in CISA KEV?: None of Shamalli Web Directory Free's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for Shamalli Web Directory Free vulnerabilities?: No Shamalli Web Directory Free CVEs currently have a tracked public exploit in this dataset.
Which versions of Shamalli Web Directory Free are affected?: 18 distinct Shamalli Web Directory Free versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in Shamalli Web Directory Free CVEs?: Shamalli Web Directory Free's CVEs most often map to these CWE weakness types: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-352 (Cross-Site Request Forgery (CSRF)), CWE-89 (Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')).
How many critical Shamalli Web Directory Free vulnerabilities are there?: Shamalli Web Directory Free has 1 critical and 3 high-severity CVEs.
What is the average severity of Shamalli Web Directory Free CVEs?: The average CVSS base score across Shamalli Web Directory Free's scored CVEs is 7.4.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track Shamalli Web Directory Free vulnerabilities

Monitor new Shamalli Web Directory Free vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing