Lucene search
+L

109 matches found

Vulnrichment
Vulnrichment
added 2025/07/04 11:18 a.m.4 views

CVE-2025-32297 WordPress Simple Link Directory Pro plugin <= 14.7.3 - SQL Injection Vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in quantumcloud Simple Link Directory allows SQL Injection. This issue affects Simple Link Directory: from n/a through 14.7.3...

8.5CVSS7AI score0.00252EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/07/04 12:0 a.m.8 views

WordPress plugin Simple Link Directory SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A SQL injection...

8.5CVSS7.7AI score0.00252EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/07/04 12:0 a.m.13 views

PT-2025-27908 · Unknown · Simple Link Directory

Name of the Vulnerable Software and Affected Versions: Simple Link Directory versions n/a through 14.7.3 Description: The issue is related to an SQL Injection vulnerability, specifically an Improper Neutralization of Special Elements used in an SQL Command. This allows attackers to execute...

8.5CVSS7.7AI score0.00252EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
added 2025/05/23 8:14 a.m.6 views

CVE-2024-12417

The The Simple Link Directory plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 8.4.5. This is due to the software allowing users to execute an action that does not properly validate a value before running doshortcode. This makes it possible...

6.5CVSS7.6AI score0.00465EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 10:6 a.m.10 views

CVE-2019-13463

An XSS vulnerability in qcopd-shortcode-generator.php in the Simple Link Directory plugin before 7.3.5 for WordPress allows remote attackers to inject arbitrary web script or HTML, because eschtml is not called for the "echo getthetitle" or "echo $term-name" statement...

6.1CVSS6.2AI score0.01144EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/18 4:3 p.m.26 views

CVE-2025-32296

Missing Authorization vulnerability in quantumcloud Simple Link Directory qc-simple-link-directory allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Simple Link Directory: from n/a through 14.8.1...

5.3CVSS7.2AI score0.00265EPSS
SaveExploits0References1
NVD
NVD
added 2025/05/16 4:15 p.m.8 views

CVE-2025-32296

Missing Authorization vulnerability in quantumcloud Simple Link Directory qc-simple-link-directory allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Simple Link Directory: from n/a through 14.8.1...

5.3CVSS0.00265EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/05/16 3:45 p.m.8 views

CVE-2025-32296 WordPress Simple Link Directory Pro plugin < 14.8.1 - Broken Access Control Vulnerability

Missing Authorization vulnerability in quantumcloud Simple Link Directory qc-simple-link-directory allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Simple Link Directory: from n/a through 14.8.1...

5.3CVSS7.2AI score0.00265EPSS
SaveExploits0References1
CVE
CVE
added 2025/05/16 3:45 p.m.26 views

CVE-2025-32296

CVE-2025-32296 affects WordPress plugin Simple Link Directory Pro

5.3CVSS7.2AI score0.00265EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2025/05/16 12:59 p.m.10 views

WordPress Simple Link Directory Pro plugin < 14.8.1 - Broken Access Control Vulnerability

Broken Access Control Vulnerability discovered by Anhchangmutrang in WordPress Plugin Simple Link Directory versions 14.8.1...

5.3CVSS8.2AI score0.00265EPSS
SaveExploits0Affected Software1
CNNVD
CNNVD
added 2025/05/16 12:0 a.m.6 views

WordPress plugin Simple Link Directory Pro 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

5.3CVSS6.3AI score0.00265EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2025/05/16 12:0 a.m.6 views

PT-2025-21689 · Unknown · Simple Link Directory

Name of the Vulnerable Software and Affected Versions: Simple Link Directory Pro versions through 14.7.3 Description: The issue is related to a Missing Authorization vulnerability, which allows the exploitation of incorrectly configured access control security levels. Recommendations: For version...

5.3CVSS6.1AI score0.00265EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2024/12/13 8:24 a.m.10 views

CVE-2024-12417 Simple Link Directory <= 8.4.5 - Unauthenticated Arbitrary Shortcode Execution

The The Simple Link Directory plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 8.4.5. This is due to the software allowing users to execute an action that does not properly validate a value before running doshortcode. This makes it possible...

6.5CVSS7.6AI score0.00465EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2024/12/13 12:0 a.m.10 views

PT-2024-17586 · WordPress · Simple Link Directory

Name of the Vulnerable Software and Affected Versions: Simple Link Directory plugin for WordPress versions up to, and including, 8.4.0 Description: The issue arises from the software allowing users to execute an action that does not properly validate a value before running do shortcode, making it...

6.5CVSS8.1AI score0.00465EPSS
SaveExploits0References7
CNNVD
CNNVD
added 2024/12/13 12:0 a.m.6 views

WordPress plugin Simple Link Directory 代码注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A code injection...

6.5CVSS9AI score0.00465EPSS
SaveExploits0References3
Patchstack
Patchstack
added 2024/12/12 8:8 p.m.7 views

WordPress Simple Link Directory plugin <= 8.4.0 - Unauthenticated Arbitrary Shortcode Execution vulnerability

Unauthenticated Arbitrary Shortcode Execution vulnerability discovered by Arkadiusz Hydzik in WordPress Plugin Simple Link Directory versions = 8.4.0...

6.5CVSS7.1AI score0.00465EPSS
SaveExploits0References1Affected Software1
VulnCheck KEV
VulnCheck KEV
added 2023/12/10 12:0 a.m.5 views

VulnCheck KEV: CVE-2022-0760

The Simple Link Directory WordPress plugin before 7.7.2 does not validate and escape the postid parameter before using it in a SQL statement via the qcopdupvoteaction AJAX action available to unauthenticated and authenticated users, leading to an unauthenticated SQL Injection...

9.8CVSS7.4AI score0.10825EPSS
SaveExploits2References1
ATTACKERKB
ATTACKERKB
added 2022/03/21 7:15 p.m.7 views

CVE-2022-0760

The Simple Link Directory WordPress plugin before 7.7.2 does not validate and escape the postid parameter before using it in a SQL statement via the qcopdupvoteaction AJAX action available to unauthenticated and authenticated users, leading to an unauthenticated SQL Injection...

9.8CVSS5.8AI score0.10825EPSS
SaveExploits2References4
OSV
OSV
added 2022/03/21 7:15 p.m.6 views

CVE-2022-0760

The Simple Link Directory WordPress plugin before 7.7.2 does not validate and escape the postid parameter before using it in a SQL statement via the qcopdupvoteaction AJAX action available to unauthenticated and authenticated users, leading to an unauthenticated SQL Injection...

9.8CVSS5.8AI score0.10825EPSS
SaveExploits2References2
NVD
NVD
added 2022/03/21 7:15 p.m.22 views

CVE-2022-0760

The Simple Link Directory WordPress plugin before 7.7.2 does not validate and escape the postid parameter before using it in a SQL statement via the qcopdupvoteaction AJAX action available to unauthenticated and authenticated users, leading to an unauthenticated SQL Injection...

9.8CVSS0.10825EPSS
SaveExploits2References2
Rows per page
Query Builder