web_2.0_directory_plugin_for_wordpress vulnerabilities

CVEs whose affected-version data names the web_2.0_directory_plugin_for_wordpress package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-15272Medium· 6.5

6d ago

Web 2.0 Directory <= 2.10.12 - Unauthenticated SQL Injection via 'w2dc_level_filter' Parameter

The Web 2.0 Directory plugin for WordPress is vulnerable to time-based SQL Injection via the 'w2dc_level_filter' parameter in all versions up to, and including, 2.10.12 due to insufficient escaping on the user supplied parameter and lack…

▾ SunlitShamalli · Web 2.0 Directory plugin for WordPressEPSS 0.32%via CVEORG