Simple link directory

This hub aggregates every CVE we track for Simple link directory, a product in the web cms plugins space. Use it to gauge the current risk picture and drill into individual advisories.

Severity distribution

Monthly trend

The 13 most recently published vulnerabilities affecting Simple link directory.

• CVE-2026-57682WordPress Simple Link Directory plugin <= 15.0.5 - Cross Site Scripting (XSS) vulnerability7.1Jul 2, 2026
• CVE-2026-53742Simple Link Directory through 9.0.4 Stored XSS via Embed Shortcode Attributes5.4Jun 10, 2026
• CVE-2026-53741Simple Link Directory through 9.0.4 Stored XSS via sld_no_results_found Option5.4Jun 10, 2026
• CVE-2026-7209Simple Link Directory <= 8.9.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes6.4May 2, 2026
• CVE-2025-67576WordPress Simple Link Directory plugin <= 8.8.3 - Broken Access Control vulnerability5.3Dec 9, 2025
• CVE-2025-67465WordPress Simple Link Directory plugin <= 8.8.3 - Cross Site Request Forgery (CSRF) vulnerability4.3Dec 9, 2025
• CVE-2025-49901WordPress Simple Link Directory plugin < 14.8.1 - Broken Authentication vulnerability9.8Oct 22, 2025
• CVE-2025-48297WordPress Simple Link Directory < 14.8.1 - Cross Site Scripting (XSS) Vulnerability7.1Aug 20, 2025
• CVE-2025-32297WordPress Simple Link Directory Pro plugin < 14.8.1 - SQL Injection Vulnerability8.5Jul 4, 2025
• CVE-2025-32296WordPress Simple Link Directory Pro plugin < 14.8.1 - Broken Access Control Vulnerability5.3May 16, 2025
• CVE-2024-12417Simple Link Directory <= 8.4.5 - Unauthenticated Arbitrary Shortcode Execution6.5Dec 13, 2024
• CVE-2022-0760Simple Link Directory < 7.7.2 - Unauthenticated SQL injection9.8Mar 21, 2022
• CVE-2019-13463An XSS vulnerability in qcopd-shortcode-generator.php in the Simple Link Directory plugin before 7.3.5 for WordPress allows remote attackers to inject arbitrary web script or HTML, because esc_html...6.1Mar 20, 2020