Simple Link Directory
Approved changes feed: RSS · Atom
cpe:2.3:a:quantumcloud:simple_link_directory:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Quantumcloud (fc50f2d3-47a6-505c-9932-77dd419877b0) |
|---|---|
| Product | Simple Link Directory (750e1039-9c10-595c-80db-3402096b7c38) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-57682 |
vulnerable | 2026-07-29 01:03:15.958088 |
WordPress Simple Link Directory plugin <= 15.0.5 - Cross Site Scripting (XSS) vulnerability
HIGH (7.1)
Unauthenticated Cross Site Scripting (XSS) in Simple Link Directory <= 15.0.5 versions.
Published: 2026-07-02T11:15:38.688Z
Updated: 2026-07-02T19:45:25.905Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-53742 |
vulnerable | 2026-07-29 01:00:27.224872 |
Simple Link Directory through 9.0.4 Stored XSS via Embed Shortcode Attributes
MEDIUM (5.4)
Simple Link Directory through 9.0.4 echoes embed shortcode attributes into HTML data attributes without escaping in the embedder template. Attackers with contributor access can craft a shortcode attribute that injects an event handler executing in a viewer's browser.
Published: 2026-06-10T20:39:46.549Z
Updated: 2026-06-11T13:58:44.233Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-53741 |
vulnerable | 2026-07-29 01:00:27.222797 |
Simple Link Directory through 9.0.4 Stored XSS via sld_no_results_found Option
MEDIUM (5.4)
Simple Link Directory through 9.0.4 interpolates the sld_no_results_found option into a JavaScript string literal without encoding. Because sanitize_text_field leaves quotes intact, a stored payload breaks out of the string and runs script for every page visitor.
Published: 2026-06-10T20:39:45.823Z
Updated: 2026-06-11T14:41:11.419Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-7209 |
vulnerable | 2026-06-08 08:07:05.514072 |
Simple Link Directory <= 8.9.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes
MEDIUM (6.4)
The Simple Link Directory plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's `qcopd-directory` shortcode in all versions up to, and including, 8.9.2. This is due to insufficient input sanitization and output escaping on user supplied attributes such as `title_font_size`. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
Published: 2026-05-02T03:36:43.260Z
Updated: 2026-05-04T12:45:30.248Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-67576 |
vulnerable | 2026-06-08 07:41:20.021097 |
WordPress Simple Link Directory plugin <= 8.8.3 - Broken Access Control vulnerability
MEDIUM (5.3)
Missing Authorization vulnerability in QuantumCloud Simple Link Directory simple-link-directory allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Simple Link Directory: from n/a through <= 8.8.3.
Published: 2025-12-09T14:14:13.956Z
Updated: 2026-04-28T19:24:18.251Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-67465 |
vulnerable | 2026-06-08 07:41:19.846576 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-49901 |
vulnerable | 2026-06-08 07:29:15.080355 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-48297 |
vulnerable | 2026-06-08 07:27:15.666063 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-32297 |
vulnerable | 2026-06-08 07:18:59.429593 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-32296 |
vulnerable | 2026-06-08 07:18:59.429143 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-12417 |
vulnerable | 2026-06-08 06:23:51.913999 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.