Extension WordPress
Vulnérabilités Simple Link Directory – AI Powered
Cette page rassemble les failles publiées pour Simple Link Directory – AI Powered, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de Simple Link Directory – AI Powered
7 fiches
Simple Link Directory <= 8.9.2 – Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes
The Simple Link Directory plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's `qcopd-directory` shortcode in all versions up to, and including, 8.9.2. This is due to insufficient input sanitization and output escaping on user…
*-8.9.2
8.9.4
01/05/2026
Simple Link Directory <= 8.8.3 – Missing Authorization
The Simple Link Directory plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in all versions up to, and including, 8.8.3. This makes it possible for unauthenticated attackers to perform…
*-8.8.3
8.8.4
15/12/2025
Simple Link Directory <= 8.8.3 – Cross-Site Request Forgery
The Simple Link Directory plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 8.8.3. This is due to missing or incorrect nonce validation on a function. This makes it possible for…
*-8.8.3
8.8.4
15/12/2025
Simple Link Directory <= 8.4.5 – Unauthenticated Arbitrary Shortcode Execution
The The Simple Link Directory plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 8.4.5. This is due to the software allowing users to execute an action that does not properly…
*-8.4.5
8.4.6
12/12/2024
Simple Link Directory <= 7.7.1 – Unauthenticated SQL Injection
The Simple Link Directory WordPress plugin before 7.7.2 does not validate and escape the post_id parameter before using it in a SQL statement via the qcopd_upvote_action AJAX action (available to unauthenticated and authenticated users), leading to an unauthenticated…
[*, 7.7.2)
7.7.2
28/02/2022
Simple Link Directory < 7.3.5 – Reflected Cross-Site Scripting
An XSS vulnerability in qcopd-shortcode-generator.php in the Simple Link Directory plugin before 7.3.5 for WordPress allows remote attackers to inject arbitrary web script or HTML, because esc_html is not called for the "echo get_the_title()" or "echo $term->name" statement.
[*, 7.3.5)
7.3.5
09/07/2019
Simple Link Directory <= 5.6.0 – PHP Object Injection
The Simple Link Directory plugin for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 5.6.0 via deserialization of untrusted input from the 'settings' parameters as part of the Option Tree framework. This allows…
*-5.6.0
5.7.0
12/11/2018
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.