CVE-2025-67576
MediumCVSS 5.3Exploitation Probability (EPSS)
Low risk18th percentile - higher than 18% of all known CVEs
Summary
The QuantumCloud Simple Link Directory plugin for WordPress has a Missing Authorization vulnerability that allows exploiting incorrectly configured access control security levels. This issue affects Simple Link Directory from n/a through <= 8.8.3.
Risk Assessment
The risk includes potential unauthorized access to administrative functions or sensitive data, which could lead to confidentiality and integrity compromise. Attackers may exploit this to escalate privileges or modify content.
Recommendation
Update the Simple Link Directory plugin to the latest version that includes a fix. Also review access control configuration to ensure it is correct.
Other vulnerabilities in Simple Link Directory
See all- CVE-2026-57682High
The Simple Link Directory plugin version 15.0.5 and earlier contains an unauthenticated Cross Site Scripting (XSS) vulnerability. An attacker can inject malicious script without requiring authentication.
- CVE-2026-53742Medium
Simple Link Directory through 9.0.4 echoes embed shortcode attributes into HTML data attributes without escaping in the embedder template. Attackers with contributor access can inject an event handler executing in a viewer's browser.
- CVE-2026-53741Medium
Simple Link Directory through 9.0.4 interpolates the sld_no_results_found option into a JavaScript string literal without encoding. Because sanitize_text_field leaves quotes intact, a stored payload breaks out of the string and runs script for every page visitor.
- CVE-2025-67465Medium
CSRF vulnerability in the Simple Link Directory WordPress plugin allows an attacker to perform unauthorized requests on behalf of a logged-in administrator. Affects versions up to and including 8.8.3.
Original NVD description (English source)
Missing Authorization vulnerability in QuantumCloud Simple Link Directory simple-link-directory allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Simple Link Directory: from n/a through <= 8.8.3.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS