Advisories · Technology

QuantumCloud Simple Link Directory.

Every CVE that names QuantumCloud Simple Link Directory among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-57682 CVE record

CVSS 7.1 High

WordPress Simple Link Directory plugin <= 15.0.5 - Cross Site Scripting (XSS) vulnerability
- QuantumCloud Simple Link Directory
- Cross-site scripting (XSS)
Not analysed yet 2 Jul 2026
CVE-2026-53742 CVE record

CVSS 5.1 Medium

Simple Link Directory through 9.0.4 Stored XSS via Embed Shortcode Attributes
- quantumcloud Simple Link Directory
- Cross-site scripting (XSS)
Not analysed yet 10 Jun 2026
CVE-2026-53741 CVE record

CVSS 5.1 Medium

Simple Link Directory through 9.0.4 Stored XSS via sld_no_results_found Option
- quantumcloud Simple Link Directory
- Cross-site scripting (XSS)
Not analysed yet 10 Jun 2026
CVE-2026-7209 CVE record

CVSS 6.4 Medium

Simple Link Directory <= 8.9.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes
- quantumcloud Simple Link Directory
- Cross-site scripting (XSS)
Not analysed yet 2 May 2026
CVE-2025-67576 CVE record

CVSS 5.3 Medium

WordPress Simple Link Directory plugin <= 8.8.3 - Broken Access Control vulnerability
- QuantumCloud Simple Link Directory
- Broken access control
Not analysed yet 9 Dec 2025
CVE-2025-67465 CVE record

CVSS 4.3 Medium

WordPress Simple Link Directory plugin <= 8.8.3 - Cross Site Request Forgery (CSRF) vulnerability
- QuantumCloud Simple Link Directory
- Cross-site request forgery (CSRF)
Not analysed yet 9 Dec 2025
CVE-2025-49901 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

WordPress Simple Link Directory plugin < 14.8.1 - Broken Authentication vulnerability
- quantumcloud Simple Link Directory
- Authentication bypass
Not analysed yet 22 Oct 2025
CVE-2025-48297 CVE record

CVSS 7.1 High

WordPress Simple Link Directory < 14.8.1 - Cross Site Scripting (XSS) Vulnerability
- quantumcloud Simple Link Directory
- Cross-site scripting (XSS)
Not analysed yet 20 Aug 2025
CVE-2025-32297 CVE record

CVSS 8.5 High

WordPress Simple Link Directory Pro plugin < 14.8.1 - SQL Injection Vulnerability
- quantumcloud Simple Link Directory
- SQL injection
Not analysed yet 4 Jul 2025
CVE-2025-32296 CVE record

CVSS 5.3 Medium

WordPress Simple Link Directory Pro plugin < 14.8.1 - Broken Access Control Vulnerability
- quantumcloud Simple Link Directory
- Broken access control
Not analysed yet 16 May 2025
CVE-2024-12417 CVE record

CVSS 6.5 Medium

Simple Link Directory <= 8.4.5 - Unauthenticated Arbitrary Shortcode Execution
- quantumcloud Simple Link Directory
- Code injection
Not analysed yet 13 Dec 2024