Privilege Escalation Vulnerability in Simple Business Directory Pro by QuantumCloud
CVE-2025-31918

9.8CRITICAL

Key Information:

Vendor

WordPress
Status
Simple Business Directory Pro
Vendor
CVE Published:
23 May 2025

What is CVE-2025-31918?

An Incorrect Privilege Assignment vulnerability exists in QuantumCloud's Simple Business Directory Pro, enabling privilege escalation. This flaw can allow users to gain access to restricted areas of the application. Affected versions include Simple Business Directory Pro from n/a up to 15.4.8, necessitating prompt attention to secure the application against unauthorized user actions.

Affected Version(s)

Simple Business Directory Pro <= 15.4.8

References

https://patchstack.com/database/wordpress/plugin/simple-b...
vdb-entry

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Phat RiO - BlueRock (Patchstack Alliance)
.
CVE-2025-31918 : Privilege Escalation Vulnerability in Simple Business Directory Pro by QuantumCloud