Access Control Flaw in QuantumCloud's Simple Link Directory Plugin
CVE-2025-67576

5.3MEDIUM

Key Information:

Vendor

WordPress
Status
Simple Link Directory
Vendor
CVE Published:
9 December 2025

What is CVE-2025-67576?

The Simple Link Directory plugin by QuantumCloud presents a significant security risk due to a missing authorization vulnerability. This flaw allows unauthorized users to exploit incorrectly configured access control settings, potentially gaining access to sensitive information. Users of Simple Link Directory versions up to 8.8.3 are particularly at risk, as the vulnerability may enable unauthorized actions that compromise the integrity of information management and user privacy.

Affected Version(s)

Simple Link Directory 0 <= 8.8.3

References

https://patchstack.com/database/Wordpress/Plugin/simple-l...
vdb-entry

CVSS V3.1

Score:
5.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

daroo | Patchstack Bug Bounty Program
.