CVE-2026-7209 | quantumcloud Simple Link Directory Plugin up to 8.9.2 on WordPress Shortcode title_font_size cross site scripting (EUVD-2026-26729)

A vulnerability described as problematic has been identified in quantumcloud Simple Link Directory Plugin up to 8.9.2 on WordPress. This vulnerability affects unknown code of the component Shortcode Handler. The manipulation of the argument title_font_size results in cross site scripting.

This vulnerability is reported as CVE-2026-7209. The attack can be launched remotely. No exploit exists.

Upgrading the affected component is recommended.