QuantumCloud Simple Business Directory Pro Privilege Escalation Vulnerability

A privilege escalation vulnerability has been identified in the QuantumCloud Simple Business Directory Pro plugin for WordPress, affecting versions prior to 15.6.9. This vulnerability allows low-privileged users to escalate their privileges, potentially leading to full control of the website.

Impact

Exploitation of this vulnerability could allow a low-privileged user to gain higher privileges, with the potential to take full control of the website.

Remediation

Users of the QuantumCloud Simple Business Directory Pro plugin should update to version 15.6.9 or later. Patchstack users can enable auto-update for vulnerable plugins.