What’s Vulnerable › Products
Link Library vulnerabilities
26 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 14 published in the last 12 months.
Check whether your Link Library version is affected
Latest Link Library vulnerabilities
- CVE-2026-78392 — Link Library < 7.9.6 - Contributor+ Stored XSS via 'link_target' Parameter (CVSS 6.8)
- CVE-2026-15090 — Link Library <= 7.9.2 - Unauthenticated SQL Injection via 'link_url' Parameter (CVSS 7.5)
- CVE-2026-78397 — Link Library < 7.9.6 - Unauthenticated SSRF via Reciprocal Link Validation (CVSS 4.0)
- CVE-2026-78394 — Link Library < 7.9.6 - Contributor+ Path Traversal via 'filepath' Parameter (CVSS 4.1)
- CVE-2026-78393 — Link Library < 7.9.6 - Reflected XSS via 'link_tags' and 'link_price' Sort and Breadcrumb Links (CVSS 6.1)
- CVE-2026-18855 — Link Library <= 7.9.4 - Unauthenticated Arbitrary File Deletion via link_url Parameter (CVSS 9.1)
- CVE-2026-16535 — Link Library < 7.9.4 - Reflected XSS via Thumbs-Rating likelabel (CVSS 6.1)
- CVE-2026-16532 — Link Library < 7.9.3 - Unauthenticated SQL Injection via the Front-End Link Submission Form (CVSS 9.1)
- CVE-2026-18197 — (CVSS 6.1)
- CVE-2026-40779 — WordPress Link Library plugin <= 7.8.8 - Arbitrary File Deletion vulnerability (CVSS 7.7)
- CVE-2025-68600 — WordPress Link Library plugin <= 7.8.7 - Server Side Request Forgery (SSRF) vulnerability (CVSS 4.9)
- CVE-2025-46237 — WordPress Link Library plugin <= 7.8 - Cross Site Scripting (XSS) Vulnerability (CVSS 5.4)
- CVE-2025-2889 — Link Library <= 7.7.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Link Additional Parameters (CVSS 6.4)
- CVE-2024-13404 — Link Library <= 7.7.2 - Reflected Cross-Site Scripting (CVSS 6.1)
- CVE-2024-38711 — WordPress Link Library plugin <= 7.7.1 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 6.1)
- CVE-2024-35687 — WordPress Link Library plugin <= 7.6.3 - Reflected Cross-Site Scripting (XSS) vulnerability (CVSS 6.1)
- CVE-2024-4281 — Link Library <= 7.6.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via link-library Shortcode (CVSS 5.4)
- CVE-2024-2325 — Link Library <= 7.6.6 - Reflected Cross-Site Scripting (CVSS 6.1)
- CVE-2024-29123 — WordPress Link Library plugin <= 7.6 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 6.1)
- CVE-2024-1559 — Link Library <= 7.6 - Unauthenticated Stored Cross-Site Scripting (CVSS 6.1)
- CVE-2024-24875 — WordPress Link Library Plugin <= 7.5.13 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 8.8)
- CVE-2024-24879 — WordPress Link Library Plugin <= 7.5.13 is vulnerable to Cross Site Scripting (XSS) (CVSS 6.1)
- CVE-2022-4199 — Link Library < 7.4.1 - Admin+ Stored XSS (CVSS 4.8)
- CVE-2021-25093 — Link Library < 7.2.8 - Unauthenticated Arbitrary Links Deletion (CVSS 7.5)
- CVE-2021-25092 — Link Library < 7.2.8 - Library Settings Reset via CSRF (CVSS 6.5)