| CVE-2026-78396 |
The Link Library WordPress plugin before 7.10.0 does not verify that a requested link belongs to the settings set…
|
5.3
Moyenne
|
29 oct. 2026 |
| CVE-2026-78395 |
The Link Library WordPress plugin before 7.10.0 does not re-check the selected library's own login requirement when…
|
5.3
Moyenne
|
29 oct. 2026 |
| CVE-2026-78392 |
The Link Library WordPress plugin before 7.9.6 does not sanitise and escape a link field before outputting it inside…
|
6.8
Moyenne
|
22 oct. 2026 |
| CVE-2026-78393 |
The Link Library WordPress plugin before 7.9.6 does not properly escape some parameters before outputting them in the…
|
6.1
Moyenne
|
25 sept. 2026 |
| CVE-2026-78394 |
The Link Library WordPress plugin before 7.9.6 does not sanitize a user-supplied destination folder before writing a…
|
4.1
Moyenne
|
25 sept. 2026 |
| CVE-2026-78397 |
The Link Library WordPress plugin before 7.9.6 does not validate the destination of a user-supplied URL before falling…
|
4.0
Moyenne
|
25 sept. 2026 |
| CVE-2026-16535 |
The Link Library WordPress plugin before 7.9.4 does not sanitise and escape a parameter before reflecting it back in a…
|
6.1
Moyenne
|
8 août 2026 |
| CVE-2026-16532 |
The Link Library WordPress plugin before 7.9.3 does not properly sanitise and escape a user-supplied value before…
|
9.1
Critique
|
3 août 2026 |
| CVE-2022-4199 |
The Link Library WordPress plugin before 7.4.1 does not sanitise and escape some of its settings, which could allow high…
|
4.8
Moyenne
|
16 janv. 2023 |
| CVE-2021-25092 |
The Link Library WordPress plugin before 7.2.8 does not have CSRF check when resetting library settings, allowing…
|
Non notée
|
1 févr. 2022 |
| CVE-2021-25093 |
The Link Library WordPress plugin before 7.2.8 does not have authorisation in place when deleting links, allowing…
|
Non notée
|
1 févr. 2022 |
| CVE-2021-25091 |
The Link Library WordPress plugin before 7.2.9 does not sanitise and escape the settingscopy parameter before outputting…
|
Non notée
|
1 févr. 2022 |