The WordPress Simple Link Directory plugin contains a missing authorization issue that allows attackers to exploit incorrectly configured access control security levels. By bypassing the intended permission checks, an attacker could potentially perform actions that should be restricted to privileged users, such as modifying plugin settings or accessing sensitive data. The weakness corresponds to CWE-862 (Missing Authorization).

The vulnerability affects the QuantumCloud Simple Link Directory plugin in all releases up to and including version 8.8.3. Users running any of these versions on a WordPress site are potentially exposed.

The CVSS score of 5.3 indicates a moderate impact, and the EPSS score of less than 1% suggests a low probability of exploitation at present. The vulnerability is not listed in the CISA KEV catalog, implying it has not yet been observed as a known exploited vulnerability. Based on the description, the likely attack vector is an attacker manipulating URLs or gaining direct access to the WordPress administration interface where proper authorization checks are missing. The low EPSS score indicates that active exploitation is unlikely at this time.