6.5
Moyenne
CVE-2024-12417 The The Simple Link Directory plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to,…
Description
The The Simple Link Directory plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 8.4.5. This is due to the software allowing users to execute an action that does not properly validate a value before running do_shortcode. This makes it possible for unauthenticated attackers to execute arbitrary shortcodes.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Simple Link Directory 8.4 | premières → 8.4.5 | Pas de correctif indiqué |
Autres CVE de Simple Link Directory
Les 11 CVE de Simple Link Directory →
CVE-2026-57682
Unauthenticated Cross Site Scripting (XSS) in Simple Link Directory <= 15.0.5 versions
7.1
Élevée
CVE-2026-53742
Simple Link Directory through 9.0.4 echoes embed shortcode attributes into HTML data attributes without escaping in…
5.1
Moyenne
CVE-2026-53741
Simple Link Directory through 9.0.4 interpolates the sld_no_results_found option into a JavaScript string literal…
5.1
Moyenne
CVE-2026-7209
The Simple Link Directory plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's…
6.4
Moyenne