| CVE-2026-78396 |
The Link Library WordPress plugin before 7.10.0 does not verify that a requested link belongs to the settings set…
|
5.3
Medium
|
Oct 29, 2026 |
| CVE-2026-78395 |
The Link Library WordPress plugin before 7.10.0 does not re-check the selected library's own login requirement when…
|
5.3
Medium
|
Oct 29, 2026 |
| CVE-2026-78392 |
The Link Library WordPress plugin before 7.9.6 does not sanitise and escape a link field before outputting it inside…
|
6.8
Medium
|
Oct 22, 2026 |
| CVE-2026-78393 |
The Link Library WordPress plugin before 7.9.6 does not properly escape some parameters before outputting them in the…
|
6.1
Medium
|
Sep 25, 2026 |
| CVE-2026-78394 |
The Link Library WordPress plugin before 7.9.6 does not sanitize a user-supplied destination folder before writing a…
|
4.1
Medium
|
Sep 25, 2026 |
| CVE-2026-78397 |
The Link Library WordPress plugin before 7.9.6 does not validate the destination of a user-supplied URL before falling…
|
4.0
Medium
|
Sep 25, 2026 |
| CVE-2026-16535 |
The Link Library WordPress plugin before 7.9.4 does not sanitise and escape a parameter before reflecting it back in a…
|
6.1
Medium
|
Aug 8, 2026 |
| CVE-2026-16532 |
The Link Library WordPress plugin before 7.9.3 does not properly sanitise and escape a user-supplied value before…
|
9.1
Critical
|
Aug 3, 2026 |
| CVE-2022-4199 |
The Link Library WordPress plugin before 7.4.1 does not sanitise and escape some of its settings, which could allow high…
|
4.8
Medium
|
Jan 16, 2023 |
| CVE-2021-25092 |
The Link Library WordPress plugin before 7.2.8 does not have CSRF check when resetting library settings, allowing…
|
Not rated
|
Feb 1, 2022 |
| CVE-2021-25093 |
The Link Library WordPress plugin before 7.2.8 does not have authorisation in place when deleting links, allowing…
|
Not rated
|
Feb 1, 2022 |
| CVE-2021-25091 |
The Link Library WordPress plugin before 7.2.9 does not sanitise and escape the settingscopy parameter before outputting…
|
Not rated
|
Feb 1, 2022 |