CVE-2025-32297
Description
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in quantumcloud Simple Link Directory qc-simple-link-directory allows SQL Injection.This issue affects Simple Link Directory: from n/a through < 14.8.1.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
The Simple Link Directory plugin for WordPress contains an unauthenticated SQL injection vulnerability allowing attackers to extract database contents.
The Simple Link Directory plugin for WordPress (versions < 14.8.1) contains an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability. The flaw exists in the qc-simple-link-directory plugin, where user-supplied input is not properly sanitized before being used in SQL queries, allowing an attacker to inject malicious SQL commands [1].
AI Insight generated on May 19, 2026. Synthesized from this CVE's description and the cited reference URLs; citations are validated against the source bundle.
Affected products
1- Range: <14.8.1
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
1News mentions
0No linked articles in our index yet.