Approved changes feed: RSS · Atom

cpe:2.3:a:unknown:web_directory_free:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorUnknown (668ca391-a6cc-5e33-879b-83885214de33)
ProductWeb Directory Free (0b469a7c-3b3d-537a-be73-6711a6cd64b8)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-3673 vulnerable 2026-06-08 06:43:51.174707 Web Directory Free < 1.7.3 - Unauthenticated LFI
The Web Directory Free WordPress plugin before 1.7.3 does not validate a parameter before using it in an include(), which could lead to Local File Inclusion issues.
Published: 2024-08-30T06:00:02.162Z
Updated: 2024-08-30T18:16:23.243Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-3669 vulnerable 2026-06-08 06:43:51.166733 Web Directory Free < 1.7.2 - Reflected XSS
The Web Directory Free WordPress plugin before 1.7.2 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin
Published: 2024-07-30T06:00:06.976Z
Updated: 2024-08-01T20:20:01.025Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-3552 vulnerable 2026-06-08 06:41:53.569496 Web Directory Free < 1.7.0 - Unauthenticated SQL Injection
The Web Directory Free WordPress plugin before 1.7.0 does not sanitise and escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading to a SQL injection with different techniques like UNION, Time-Based and Error-Based.
Published: 2024-06-13T06:00:02.709Z
Updated: 2025-03-25T14:04:25.515Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.