Link Library

WordPress plugin · link-library · WordPress.org ↗

Critical

High

Known total

Unfixed

Running Link Library on your site? WP Alerts checks your installed version against every entry below and emails you only when one affects you. Free, no tracking.

Scan a site Monitor my sites →

Severity	Vulnerability	Affected	Fixed in	CVE	Published
CRITICAL CVSS 9.1	Link Library < 7.9.3 - Unauthenticated SQL Injection via the Front-End Link Submission Form CVE.org	>=0, <7.9.3	v7.9.3	CVE-2026-16532	Aug 3, 2026
MEDIUM CVSS 5.3	Link Library < 7.10.0 - Unauthenticated Link Submission Login Requirement Bypass CVE.org	>=0, <7.10.0	v7.10.0	CVE-2026-78395	Oct 29, 2026
MEDIUM CVSS 5.3	Link Library < 7.10.0 - Unauthenticated Link Contact and Submitter Information Disclosure CVE.org	>=0, <7.10.0	v7.10.0	CVE-2026-78396	Oct 29, 2026
MEDIUM CVSS 6.8	Link Library < 7.9.6 - Contributor+ Stored XSS via 'link_target' Parameter CVE.org	>=0, <7.9.6	v7.9.6	CVE-2026-78392	Oct 22, 2026
MEDIUM CVSS 6.1	Link Library < 7.9.6 - Reflected XSS via 'link_tags' and 'link_price' Sort and Breadcrumb Links CVE.org	>=0, <7.9.6	v7.9.6	CVE-2026-78393	Sep 25, 2026
MEDIUM CVSS 4.1	Link Library < 7.9.6 - Contributor+ Path Traversal via 'filepath' Parameter CVE.org	>=0, <7.9.6	v7.9.6	CVE-2026-78394	Sep 25, 2026
MEDIUM CVSS 4.0	Link Library < 7.9.6 - Unauthenticated SSRF via Reciprocal Link Validation CVE.org	>=7.8.8, <7.9.6	v7.9.6	CVE-2026-78397	Sep 25, 2026
MEDIUM CVSS 6.1	Link Library < 7.9.4 - Reflected XSS via Thumbs-Rating likelabel CVE.org	>=0, <7.9.4	v7.9.4	CVE-2026-16535	Aug 8, 2026

Data aggregated from WPVulnerability, NVD/NIST, ENISA EUVD, CVE.org and WordPress.org. Provided as-is; verify with the plugin author before acting. Disclaimer.