CVE-2026-15272 — Web 2.0 Directory

The Web 2.0 Directory plugin for WordPress is vulnerable to SQL injection in all versions up to and including 2.10.12.