CVE-2025-32296: falha de média gravidade em quantumcloud Simple Link Directory
WordPress Simple Link Directory Pro plugin < 14.8.1 - Broken Access Control Vulnerability
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 5.3epss 0.3%
Missing Authorization vulnerability in quantumcloud Simple Link Directory qc-simple-link-directory allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Simple Link Directory: from n/a through < 14.8.1.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Produtos afetados
quantumcloud · Simple Link DirectoryCVEs relacionadas — quantumcloud Simple Link Directory
No mesmo produto, das mais perigosas para as menos.
CVE-2025-49901CRITICALWordPress Simple Link Directory plugin < 14.8.1 - Broken Authentication vulnerabilityEPSS 0.7%CVE-2024-12417MEDIUMSimple Link Directory <= 8.4.5 - Unauthenticated Arbitrary Shortcode ExecutionEPSS 0.5%CVE-2025-32297HIGHWordPress Simple Link Directory Pro plugin < 14.8.1 - SQL Injection VulnerabilityEPSS 0.3%CVE-2025-48297HIGHWordPress Simple Link Directory < 14.8.1 - Cross Site Scripting (XSS) VulnerabilityEPSS 0.3%CVE-2026-7209MEDIUMSimple Link Directory <= 8.9.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode AttributesEPSS 0.2%CVE-2026-53742MEDIUMSimple Link Directory through 9.0.4 Stored XSS via Embed Shortcode AttributesEPSS 0.1%