CVE-2026-61981

MediumCVSS 5.4

Published: 23/07/2026(UTC)Updated: 23/07/2026(UTC)Translated: 25/07/2026(UTC)NVD NIST

Summary

The Simple Link Directory Pro plugin versions 15.0.8 and earlier are vulnerable to unauthenticated Cross-Site Request Forgery (CSRF).

Risk Assessment

An unauthenticated attacker can trick an administrator into performing unwanted actions, such as changing configuration or deleting data.

Recommendation

Update Simple Link Directory Pro to the latest available version.

Other vulnerabilities in Simple Link Directory Pro

CVE-2026-61953High
SSRF vulnerability in Simple Link Directory Pro up to version 15.0.6. An unauthenticated attacker can make the server send requests to internal network resources.

Original NVD description (English source)

Unauthenticated Cross Site Request Forgery (CSRF) in Simple Link Directory Pro <= 15.0.8 versions.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS