CVE-2025-49901: falha crítica em quantumcloud Simple Link Directory
WordPress Simple Link Directory plugin < 14.8.1 - Broken Authentication vulnerability
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
28Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 9.8epss 0.7%
Authentication Bypass Using an Alternate Path or Channel vulnerability in quantumcloud Simple Link Directory qc-simple-link-directory allows Authentication Abuse.This issue affects Simple Link Directory: from n/a through < 14.8.1.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Produtos afetados
quantumcloud · Simple Link DirectoryCVEs relacionadas — quantumcloud Simple Link Directory
No mesmo produto, das mais perigosas para as menos.
CVE-2024-12417MEDIUMSimple Link Directory <= 8.4.5 - Unauthenticated Arbitrary Shortcode ExecutionEPSS 0.5%CVE-2025-32296MEDIUMWordPress Simple Link Directory Pro plugin < 14.8.1 - Broken Access Control VulnerabilityEPSS 0.3%CVE-2025-32297HIGHWordPress Simple Link Directory Pro plugin < 14.8.1 - SQL Injection VulnerabilityEPSS 0.3%CVE-2025-48297HIGHWordPress Simple Link Directory < 14.8.1 - Cross Site Scripting (XSS) VulnerabilityEPSS 0.2%CVE-2026-7209MEDIUMSimple Link Directory <= 8.9.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode AttributesEPSS 0.2%CVE-2026-53742MEDIUMSimple Link Directory through 9.0.4 Stored XSS via Embed Shortcode AttributesEPSS 0.1%