Yannick Lefebvre vulnerabilities

Products

• Link Library 28
• Modal Dialog 3

Newest

• jackdewey link library Link Library <= 7.10.0 - Unauthenticated Stored Cross-Site Scripting via 'link_description' Parameter CVE-2026-116537 7.2 HighNovember 7, 2026
• unknown link library Link Library < 7.10.0 - Unauthenticated Link Contact and Submitter Information Disclosure CVE-2026-78396 5.3 MediumOctober 29, 2026
• unknown link library Link Library < 7.10.0 - Unauthenticated Link Submission Login Requirement Bypass CVE-2026-78395 5.3 MediumOctober 29, 2026
• unknown link library Link Library < 7.9.6 - Contributor+ Stored XSS via 'link_target' Parameter CVE-2026-78392 6.8 MediumOctober 22, 2026
• jackdewey link library Link Library <= 7.9.2 - Unauthenticated SQL Injection via 'link_url' Parameter CVE-2026-15090 7.5 HighOctober 15, 2026
• unknown link library Link Library < 7.9.6 - Unauthenticated SSRF via Reciprocal Link Validation CVE-2026-78397 4.0 MediumSeptember 25, 2026
• unknown link library Link Library < 7.9.6 - Contributor+ Path Traversal via 'filepath' Parameter CVE-2026-78394 4.1 MediumSeptember 25, 2026
• unknown link library Link Library < 7.9.6 - Reflected XSS via 'link_tags' and 'link_price' Sort and Breadcrumb Links CVE-2026-78393 6.1 MediumSeptember 25, 2026
• jackdewey link library Link Library <= 7.9.4 - Unauthenticated Arbitrary File Deletion via link_url Parameter CVE-2026-18855 9.1 CriticalAugust 15, 2026
• unknown link library Link Library < 7.9.4 - Reflected XSS via Thumbs-Rating likelabel CVE-2026-16535 6.1 MediumAugust 8, 2026
• unknown link library Link Library < 7.9.3 - Unauthenticated SQL Injection via the Front-End Link Submission Form CVE-2026-16532 9.1 CriticalAugust 3, 2026
• yannick lefebvre link library WordPress Link Library plugin <= 7.8.8 - Arbitrary File Deletion vulnerability CVE-2026-40779 7.7 HighJune 15, 2026
• yannick lefebvre modal dialog WordPress Modal Dialog plugin <= 3.5.16 - Remote Code Execution (RCE) vulnerability CVE-2026-32367 9.1 CriticalMarch 13, 2026
• yannick lefebvre link library WordPress Link Library plugin <= 7.8.7 - Server Side Request Forgery (SSRF) vulnerability CVE-2025-68600 4.9 MediumDecember 24, 2025
• yannick lefebvre link library WordPress Link Library plugin <= 7.8 - Cross Site Scripting (XSS) Vulnerability CVE-2025-46237 6.5 MediumApril 22, 2025
• jackdewey link library Link Library <= 7.7.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Link Additional Parameters CVE-2025-2889 6.4 MediumApril 4, 2025
• bug library library, yannick lefebvre bug library +1 more WordPress Bug Library plugin <= 2.1.4 - SQL Injection vulnerability CVE-2025-24728 8.5 HighJanuary 24, 2025
• jackdewey link library Link Library <= 7.7.2 - Reflected Cross-Site Scripting CVE-2024-13404 6.1 MediumJanuary 21, 2025
• yannick lefebvre link library WordPress Link Library plugin <= 7.7.1 - Reflected Cross Site Scripting (XSS) vulnerability CVE-2024-38711 7.1 HighJuly 20, 2024
• yannick lefebvre link library WordPress Link Library plugin <= 7.6.3 - Reflected Cross-Site Scripting (XSS) vulnerability CVE-2024-35687 7.1 HighJune 8, 2024
• jackdewey link library Link Library <= 7.6.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via link-library Shortcode CVE-2024-4281 6.4 MediumMay 8, 2024
• jackdewey link library Link Library <= 7.6.6 - Reflected Cross-Site Scripting CVE-2024-2325 6.1 MediumApril 9, 2024
• yannick lefebvre link library WordPress Link Library plugin <= 7.6 - Reflected Cross Site Scripting (XSS) vulnerability CVE-2024-29123 7.1 HighMarch 19, 2024
• jackdewey link library Link Library <= 7.6 - Unauthenticated Stored Cross-Site Scripting CVE-2024-1559 6.5 MediumFebruary 20, 2024
• yannick lefebvre link library WordPress Link Library Plugin <= 7.5.13 is vulnerable to Cross Site Request Forgery (CSRF) CVE-2024-24875 4.3 MediumFebruary 12, 2024
• yannick lefebvre link library WordPress Link Library Plugin <= 7.5.13 is vulnerable to Cross Site Scripting (XSS) CVE-2024-24879 7.1 HighFebruary 8, 2024
• yannick lefebvre modal dialog WordPress Modal Dialog Plugin <= 3.5.14 is vulnerable to Cross Site Scripting (XSS) CVE-2023-31071 7.1 HighAugust 17, 2023
• yannick lefebvre modal dialog WordPress Modal Dialog Plugin <= 3.5.9 is vulnerable to Cross Site Scripting (XSS) CVE-2023-24001 5.9 MediumApril 6, 2023
• community events project events, jackdewey community events +1 more WordPress Community Events Plugin <= 1.4.8 is vulnerable to Cross Site Scripting (XSS) CVE-2022-44742 4.8 MediumMarch 23, 2023
• unknown link library Link Library < 7.4.1 - Admin+ Stored XSS CVE-2022-4199 4.8 MediumJanuary 16, 2023
• unknown link library Link Library < 7.2.8 - Unauthenticated Arbitrary Links Deletion CVE-2021-25093 7.5 HighFebruary 1, 2022
• unknown link library Link Library < 7.2.8 - Library Settings Reset via CSRF CVE-2021-25092 6.5 MediumFebruary 1, 2022
• unknown link library Link Library < 7.2.9 - Reflected Cross-Site Scripting CVE-2021-25091 6.1 MediumFebruary 1, 2022