MEDIUM
Shamalli
CVE published 2026-10-31
CVE-2026-15272
The Web 2.0 Directory plugin for WordPress is vulnerable to time-based SQL Injection via the 'w2dc_level_filter' parameter in all versions up to, and including, 2.10.12. This vulnerability allows unauthenticated attackers to append additional SQL queries into existing queries, potentially extracting sensitive information from the database. The plugin's insufficient escaping of user-supplied parameters and [truncated]