PT-2025-43172 · Quantumcloud · Simple Link Directory

Published 2025-10-22 · Updated 2025-11-18 · CVE-2025-49901

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions quantumcloud Simple Link Directory versions prior to 14.8.1

Description An authentication bypass issue exists in quantumcloud Simple Link Directory, allowing authentication abuse. The issue is related to using an alternate path or channel for authentication.

Recommendations Update quantumcloud Simple Link Directory to version 14.8.1 or later.

Fix

Authentication Bypass Using an Alternate Path or Channel

Weakness Enumeration

CWE-288

Related Identifiers

CVE-2025-49901

Affected Products

Simple Link Directory

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2025-49901 · Security Note
• https://twitter.com/CVEnew/status/1990792038544216556 · Twitter Post
• https://patchstack.com/database/Wordpress/Plugin/qc-simple-link-directory/vulnerability/wordpress-simple-link-directory-plugin-14-8-1-broken-authentication-vulnerability?_s_id=cve · Note
• https://vdp.patchstack.com/database/Wordpress/Plugin/qc-simple-link-directory/vulnerability/wordpress-simple-link-directory-plugin-14-8-1-broken-authentication-vulnerability · Note
• https://vdp.patchstack.com/database/Wordpress/Plugin/qc-simple-link-directory/vulnerability/wordpress-simple-link-directory-plugin-14-8-1-broken-authentication-vulnerability?_s_id=cve · Note