Simple Link Directory vulnerabilities | LiveThreat CVE Feed — Verisq

Login Request a demo

SL

Product

Simple Link Directory

by quantumcloud · last CVE Jul 2, 2026

13

CVEs

0

On KEV

9.8

Max CVSS

0

New 30D

Vulnerabilities13 In the news0 Timeline

Severity mix

Critical 2High 3Medium 8Low 0

Severity

All severities13 Critical2 High3 Medium8 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add Simple Link Directory to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2025-49901	9.8	1%	Oct 22	WordPress Simple Link Directory plugin < 14.8.1 - Broken Authentication vulnerability Affected: through 14.8.1
CVE-2022-0760	9.8	11%	Mar 21	The Simple Link Directory WordPress plugin before 7.7.2 does not validate and escape the post_id parameter before using it in a SQL statement via the qcopd_upvote_action AJAX… Affected: before 7.7.2
CVE-2025-32297	8.5	0%	Jul 4	WordPress Simple Link Directory Pro plugin < 14.8.1 - SQL Injection Vulnerability Affected: through 14.8.1
CVE-2026-57682	7.1	0%	Jul 2	WordPress Simple Link Directory plugin <= 15.0.5 - Cross Site Scripting (XSS) vulnerability Affected: through 15.0.5
CVE-2025-48297	7.1	0%	Aug 20	WordPress Simple Link Directory < 14.8.1 - Cross Site Scripting (XSS) Vulnerability Affected: through 14.8.1
CVE-2024-12417	6.5	0%	Dec 13	Simple Link Directory <= 8.4.5 - Unauthenticated Arbitrary Shortcode Execution Affected: through 8.4.5
CVE-2026-7209	6.4	0%	May 2	Simple Link Directory <= 8.9.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes Affected: through 8.9.2
CVE-2019-13463	6.1	1%	Mar 20	An XSS vulnerability in qcopd-shortcode-generator.php in the Simple Link Directory plugin before 7.3.5 for WordPress allows remote attackers to inject arbitrary web script or… Affected: before 7.3.5
CVE-2026-53742	5.4	0%	Jun 10	Simple Link Directory through 9.0.4 Stored XSS via Embed Shortcode Attributes Affected: through 9.0.4
CVE-2026-53741	5.4	0%	Jun 10	Simple Link Directory through 9.0.4 Stored XSS via sld_no_results_found Option Affected: through 9.0.4
CVE-2025-67576	5.3	0%	Dec 9	WordPress Simple Link Directory plugin <= 8.8.3 - Broken Access Control vulnerability Affected: through 8.8.3
CVE-2025-32296	5.3	0%	May 16	WordPress Simple Link Directory Pro plugin < 14.8.1 - Broken Access Control Vulnerability Affected: through 14.8.1
CVE-2025-67465	4.3	0%	Dec 9	WordPress Simple Link Directory plugin <= 8.8.3 - Cross Site Request Forgery (CSRF) vulnerability Affected: through 8.8.3