| CVE ID | Title | Vendor | Product | Severity | CVSS Score | Published At | AI Analysis |
|---|---|---|---|---|---|---|---|
| CVE-2025-69018 | WordPress Web Directory Free plugin <= 1.7.12 - Cross Site Scripting (XSS) vulnerability | Shamalli | Web Directory Free | 中危 | - | 2025-12-30 10:47:54 | Deep Dive |
| CVE-2025-39567 | WordPress Web Directory Free plugin <= 1.7.8 - Reflected Cross Site Scripting (XSS) vulnerability | Shamalli | Web Directory Free | High | 7.1 | 2025-04-17 15:46:48 | Deep Dive |
| CVE-2025-30908 | WordPress Web Directory Free plugin <= 1.7.6 - CSRF to Cross Site Scripting (XSS) vulnerability | Shamalli | Web Directory Free | High | 7.1 | 2025-04-03 13:27:09 | Deep Dive |
| CVE-2025-28904 | WordPress Web Directory Free plugin <= 1.7.6 - SQL Injection vulnerability | Shamalli | Web Directory Free | Critical | 9.3 | 2025-03-25 18:48:25 | Deep Dive |
| CVE-2024-47379 | WordPress Web Directory Free plugin <= 1.7.3 - Reflected Cross Site Scripting (XSS) vulnerability | Shamalli | Web Directory Free | High | 7.1 | 2024-10-05 15:01:32 | Deep Dive |
| CVE-2024-3673 | Web Directory Free < 1.7.3 - Unauthenticated LFI | Unknown | Web Directory Free | 超危 | - | 2024-08-30 06:00:02 | Deep Dive |
| CVE-2024-3669 | Web Directory Free < 1.7.2 - Reflected XSS | Unknown | Web Directory Free | - | - | 2024-07-30 06:00:07 | Deep Dive |
| CVE-2024-3552 | Web Directory Free < 1.7.0 - Unauthenticated SQL Injection | Unknown | Web Directory Free | - | - | 2024-06-13 06:00:03 | Deep Dive |
| CVE-2023-2201 | Web Directory Free <= 1.6.8 - Authenticated (Contributor+) SQL Injection via post_id | mihail-chepovskiy | Web Directory Free | High | 8.8 | 2023-06-02 03:36:06 | Deep Dive |