9.8
Critical
CVE-2025-49901 Authentication Bypass Using an Alternate Path or Channel vulnerability in quantumcloud Simple Link Directory…
Description
Authentication Bypass Using an Alternate Path or Channel vulnerability in quantumcloud Simple Link Directory qc-simple-link-directory allows Authentication Abuse.This issue affects Simple Link Directory: from n/a through < 14.8.1.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Simple Link Directory 14.8 | earliest → 14.8.1 | No fix stated |
Other CVEs of Simple Link Directory
The 11 CVEs of Simple Link Directory →
CVE-2026-57682
Unauthenticated Cross Site Scripting (XSS) in Simple Link Directory <= 15.0.5 versions
7.1
High
CVE-2026-53742
Simple Link Directory through 9.0.4 echoes embed shortcode attributes into HTML data attributes without escaping in…
5.1
Medium
CVE-2026-53741
Simple Link Directory through 9.0.4 interpolates the sld_no_results_found option into a JavaScript string literal…
5.1
Medium
CVE-2026-7209
The Simple Link Directory plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's…
6.4
Medium