PT-2025-49882 · Quantumcloud · Quantumcloud Simple Link Directory

Published 2025-12-09 · Updated 2025-12-15 · CVE-2025-67465

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions QuantumCloud Simple Link Directory versions n/a through 8.8.3

Description A Cross-Site Request Forgery (CSRF) issue exists in QuantumCloud Simple Link Directory. This allows an attacker to perform actions on behalf of an authenticated user without their knowledge. The vulnerability is present in the simple-link-directory component.

Recommendations Update QuantumCloud Simple Link Directory to a version later than 8.8.3.

Fix

CSRF

Weakness Enumeration

CWE-352

Related Identifiers

CVE-2025-67465

Affected Products

Quantumcloud Simple Link Directory

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2025-67465 · Security Note
• https://vdp.patchstack.com/database/Wordpress/Plugin/simple-link-directory/vulnerability/wordpress-simple-link-directory-plugin-8-8-3-cross-site-request-forgery-csrf-vulnerability?_s_id=cve · Note
• https://patchstack.com/database/Wordpress/Plugin/simple-link-directory/vulnerability/wordpress-simple-link-directory-plugin-8-8-3-cross-site-request-forgery-csrf-vulnerability?_s_id=cve · Note
• https://twitter.com/CVEnew/status/2000617587269390630 · Twitter Post