Skip to contentYannick Lefebvre Link Library vulnerabilities
- jackdewey link libraryLink Library <= 7.10.0 - Unauthenticated Stored Cross-Site Scripting via 'link_description' ParameterCVE-2026-1165377.2 High
- unknown link libraryLink Library < 7.10.0 - Unauthenticated Link Contact and Submitter Information DisclosureCVE-2026-783965.3 Medium
- unknown link libraryLink Library < 7.10.0 - Unauthenticated Link Submission Login Requirement BypassCVE-2026-783955.3 Medium
- unknown link libraryLink Library < 7.9.6 - Contributor+ Stored XSS via 'link_target' ParameterCVE-2026-783926.8 Medium
- jackdewey link libraryLink Library <= 7.9.2 - Unauthenticated SQL Injection via 'link_url' ParameterCVE-2026-150907.5 High
- unknown link libraryLink Library < 7.9.6 - Unauthenticated SSRF via Reciprocal Link ValidationCVE-2026-783974.0 Medium
- unknown link libraryLink Library < 7.9.6 - Contributor+ Path Traversal via 'filepath' ParameterCVE-2026-783944.1 Medium
- unknown link libraryLink Library < 7.9.6 - Reflected XSS via 'link_tags' and 'link_price' Sort and Breadcrumb LinksCVE-2026-783936.1 Medium
- jackdewey link libraryLink Library <= 7.9.4 - Unauthenticated Arbitrary File Deletion via link_url ParameterCVE-2026-188559.1 Critical
- unknown link libraryLink Library < 7.9.4 - Reflected XSS via Thumbs-Rating likelabelCVE-2026-165356.1 Medium
- unknown link libraryLink Library < 7.9.3 - Unauthenticated SQL Injection via the Front-End Link Submission FormCVE-2026-165329.1 Critical
- yannick lefebvre link libraryWordPress Link Library plugin <= 7.8.8 - Arbitrary File Deletion vulnerabilityCVE-2026-407797.7 High
- yannick lefebvre link libraryWordPress Link Library plugin <= 7.8.7 - Server Side Request Forgery (SSRF) vulnerabilityCVE-2025-686004.9 Medium
- yannick lefebvre link libraryWordPress Link Library plugin <= 7.8 - Cross Site Scripting (XSS) VulnerabilityCVE-2025-462376.5 Medium
- jackdewey link libraryLink Library <= 7.7.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Link Additional ParametersCVE-2025-28896.4 Medium
- jackdewey link libraryLink Library <= 7.7.2 - Reflected Cross-Site ScriptingCVE-2024-134046.1 Medium
- yannick lefebvre link libraryWordPress Link Library plugin <= 7.7.1 - Reflected Cross Site Scripting (XSS) vulnerabilityCVE-2024-387117.1 High
- yannick lefebvre link libraryWordPress Link Library plugin <= 7.6.3 - Reflected Cross-Site Scripting (XSS) vulnerabilityCVE-2024-356877.1 High
- jackdewey link libraryLink Library <= 7.6.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via link-library ShortcodeCVE-2024-42816.4 Medium
- jackdewey link libraryLink Library <= 7.6.6 - Reflected Cross-Site ScriptingCVE-2024-23256.1 Medium
- yannick lefebvre link libraryWordPress Link Library plugin <= 7.6 - Reflected Cross Site Scripting (XSS) vulnerabilityCVE-2024-291237.1 High
- jackdewey link libraryLink Library <= 7.6 - Unauthenticated Stored Cross-Site ScriptingCVE-2024-15596.5 Medium
- yannick lefebvre link libraryWordPress Link Library Plugin <= 7.5.13 is vulnerable to Cross Site Request Forgery (CSRF)CVE-2024-248754.3 Medium
- yannick lefebvre link libraryWordPress Link Library Plugin <= 7.5.13 is vulnerable to Cross Site Scripting (XSS)CVE-2024-248797.1 High
- unknown link libraryLink Library < 7.4.1 - Admin+ Stored XSSCVE-2022-41994.8 Medium
- unknown link libraryLink Library < 7.2.8 - Unauthenticated Arbitrary Links DeletionCVE-2021-250937.5 High
- unknown link libraryLink Library < 7.2.8 - Library Settings Reset via CSRFCVE-2021-250926.5 Medium
- unknown link libraryLink Library < 7.2.9 - Reflected Cross-Site ScriptingCVE-2021-250916.1 Medium