High · 8.5 CVE-2025-32297 EUVD-2025-19976GHSA-2552-xggr-7cv4

WordPress Simple Link Directory Pro plugin < 14.8.1 - SQL Injection Vulnerability

Published Jul 4, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: Quantum Cloud Product: Simple Link Directory

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in quantumcloud Simple Link Directory qc-simple-link-directory allows SQL Injection.This issue affects Simple Link Directory: from n/a through < 14.8.1.

Affected products

Vendor	Product	Affected	Fixed
quantumcloud	Simple Link Directory	≤ 14.8.1	—

References

https://patchstack.com/database/Wordpress/Plugin/qc-simple-link-directory/vulnerability/wordpress-simple-link-directory-pro-plugin-14-7-3-sql-injection-vulnerability?_s_id=cve vdb-entry