CVE-2026-57682

HighCVSS 7.1

Published: 02/07/2026(UTC)Updated: 02/07/2026(UTC)Translated: 03/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.19%

9th percentile — higher than 9% of all known CVEs

Summary

The Simple Link Directory plugin version 15.0.5 and earlier contains an unauthenticated Cross Site Scripting (XSS) vulnerability. An attacker can inject malicious script without requiring authentication.

Risk Assessment

The risk involves the execution of arbitrary JavaScript code in browsers of site visitors, potentially leading to session theft, redirects, or data theft.

Recommendation

Immediately update the Simple Link Directory plugin to the latest available version that fixes this vulnerability. If an update is not possible, consider temporarily disabling the plugin.

Original NVD description (English source)

Unauthenticated Cross Site Scripting (XSS) in Simple Link Directory <= 15.0.5 versions.