WordPress Plugin Vulnerabilities

Simple Link Directory < 5.6.0 - Authenticated PHP Object Injection

Description

Due to the OptionTree library

Affects Plugins

Plugin icon
simple-link-directory
Fixed in 5.6.0

References

URL
https://plugins.trac.wordpress.org/changeset?reponame=&new=1972410%40simple-link-directory&old=1972403%40simple-link-directory

Classification

Type
RCE
OWASP top 10
A1: Injection
CWE
CWE-94

Miscellaneous

Verified
No
WPVDB ID
70b7ee5b-b6c6-437f-8261-8aa8de75bacf

Timeline

Publicly Published
2018-11-11 (about 7 years ago)
Added
2019-06-26 (about 6 years ago)
Last Updated
2020-03-21 (about 6 years ago)

Other

Published
Title
Published
2025-09-03
Title
Easy Timer < 4.2.2 - Authenticated (Editor+) Remote Code Execution via Shortcode
Published
2024-10-11
Title
Stackable – Page Builder Gutenberg Blocks < 3.13.7 - Unauthenticated CSS Injection
Published
2025-07-16
Title
Alone <= 7.8.3 - Unauthenticated Remote Code Execution
Published
2014-06-20
Title
Disqus <= 2.75 - Remote Code Execution (RCE)
Published
2025-09-22
Title
Advanced Views < 3.7.20 - Author+ Remote Code Execution via SSTI