Link Library

Wordfence Intelligence   >   Vulnerability Database   >   WordPress Plugins   >   Link Library

Information

Software Type Plugin
Software Slug link-library (view on wordpress.org)
Software Status Active
Software Author jackdewey
Software Website ylefebvre.github.io
Software Downloads 2,437,410
Software Active Installs 10,000
Software Record Last Updated October 10, 2026

Showing 1-20 of 27 Vulnerabilities

Submit a Vulnerability
Link Library <= 7.9.5 - Authenticated (Contributor+) Path Traversal
4.3
CVE-2026-78394
Sep 23, 2026
Researcher: Karthik Ramakrishnan
Link Library <= 7.9.5 - Unauthenticated Server-Side Request Forgery
7.2
CVE-2026-78397
Sep 23, 2026
Researcher: Charles Vosburgh
Link Library <= 7.9.5 - Reflected Cross-Site Scripting
6.1
CVE-2026-78393
Sep 23, 2026
Researcher: Karthik Ramakrishnan
Link Library <= 7.9.4 - Unauthenticated Arbitrary File Deletion via link_url Parameter
9.1
CVE-2026-18855
Aug 14, 2026
Researcher: nudien
Link Library <= 7.9.3 - Reflected Cross-Site Scripting
6.1
CVE-2026-16535
Aug 3, 2026
Researcher: João Ramos Maciel
Link Library < 7.9.4 - Reflected Cross-Site Scripting
6.1
CVE-2026-18197
Jul 29, 2026
Researcher: Joshua Martinelle
Link Library <= 7.9.2 - Unauthenticated SQL Injection
7.5
CVE-2026-16532
Jul 23, 2026
Researcher: Abdullah Kareem
Link Library <= 7.8.8 - Authenticated (Contributor+) Arbitrary File Deletion
8.1
CVE-2026-40779
Apr 22, 2026
Researcher: Trương Hữu Phúc (truonghuuphuc)
Link Library <= 7.8.7 - Authenticated (Contributor+) Server-Side Request Forgery
6.4
CVE-2025-68600
Dec 24, 2025
Researcher: Krissaphat Jankaew
Link Library <= 7.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
6.4
CVE-2025-46237
Apr 22, 2025
Researcher: Muhammad Yudha - DJ
Link Library <= 7.7.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Link Additional Parameters
6.4
CVE-2025-2889
Apr 4, 2025
Researcher: siavashvafshar
Link Library <= 7.7.2 - Reflected Cross-Site Scripting
6.1
CVE-2024-13404
Jan 20, 2025
Researcher: Colin Xu
Link Library <= 7.7.1 - Reflected Cross-Site Scripting
6.1
CVE-2024-38711
Jul 11, 2024
Researcher: LVT-tholv2k
Link Library <= 7.6.3 - Reflected Cross-Site Scripting
6.1
CVE-2024-35687
Jun 6, 2024
Researcher: Dimas Maulana
Link Library <= 7.6.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via link-library Shortcode
6.4
CVE-2024-4281
May 7, 2024
Researcher: Krzysztof Zając
Link Library <= 7.6 - Reflected Cross-Site Scripting
6.1
CVE-2024-29123
Mar 16, 2024
Researcher: stealthcopter
Link Library <= 7.6.6 - Reflected Cross-Site Scripting
6.1
CVE-2024-2325
Mar 13, 2024
Researcher: Krzysztof Zając
Link Library <= 7.6 - Unauthenticated Stored Cross-Site Scripting
6.5
CVE-2024-1559
Feb 19, 2024
Researcher: Krzysztof Zając
Link Library <= 7.5.13 - Cross-Site Request Forgery via action_admin_init
4.3
CVE-2024-24875
Feb 5, 2024
Researcher: Dhabaleshwar Das
Link Library <= 7.5.13 - Reflected Cross-Site Scripting via 'link_price' and 'link_tags'
6.1
CVE-2024-24879
Feb 5, 2024
Researcher: beluga
Title Status CVE ID CVSS Researchers Date
Link Library <= 7.9.5 - Authenticated (Contributor+) Path Traversal Patched CVE-2026-78394 4.3 Karthik Ramakrishnan September 23, 2026
Link Library <= 7.9.5 - Unauthenticated Server-Side Request Forgery Patched CVE-2026-78397 7.2 Charles Vosburgh September 23, 2026
Link Library <= 7.9.5 - Reflected Cross-Site Scripting Patched CVE-2026-78393 6.1 Karthik Ramakrishnan September 23, 2026
Link Library <= 7.9.4 - Unauthenticated Arbitrary File Deletion via link_url Parameter Patched CVE-2026-18855 9.1 nudien August 14, 2026
Link Library <= 7.9.3 - Reflected Cross-Site Scripting Patched CVE-2026-16535 6.1 João Ramos Maciel August 3, 2026
Link Library < 7.9.4 - Reflected Cross-Site Scripting Patched CVE-2026-18197 6.1 Joshua Martinelle July 29, 2026
Link Library <= 7.9.2 - Unauthenticated SQL Injection Patched CVE-2026-16532 7.5 Abdullah Kareem July 23, 2026
Link Library <= 7.8.8 - Authenticated (Contributor+) Arbitrary File Deletion Patched CVE-2026-40779 8.1 Trương Hữu Phúc (truonghuuphuc) April 22, 2026
Link Library <= 7.8.7 - Authenticated (Contributor+) Server-Side Request Forgery Patched CVE-2025-68600 6.4 Krissaphat Jankaew December 24, 2025
Link Library <= 7.8 - Authenticated (Contributor+) Stored Cross-Site Scripting Patched CVE-2025-46237 6.4 Muhammad Yudha - DJ April 22, 2025
Link Library <= 7.7.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Link Additional Parameters Patched CVE-2025-2889 6.4 siavashvafshar April 4, 2025
Link Library <= 7.7.2 - Reflected Cross-Site Scripting Patched CVE-2024-13404 6.1 Colin Xu January 20, 2025
Link Library <= 7.7.1 - Reflected Cross-Site Scripting Patched CVE-2024-38711 6.1 LVT-tholv2k July 11, 2024
Link Library <= 7.6.3 - Reflected Cross-Site Scripting Patched CVE-2024-35687 6.1 Dimas Maulana June 6, 2024
Link Library <= 7.6.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via link-library Shortcode Patched CVE-2024-4281 6.4 Krzysztof Zając May 7, 2024
Link Library <= 7.6 - Reflected Cross-Site Scripting Patched CVE-2024-29123 6.1 stealthcopter March 16, 2024
Link Library <= 7.6.6 - Reflected Cross-Site Scripting Patched CVE-2024-2325 6.1 Krzysztof Zając March 13, 2024
Link Library <= 7.6 - Unauthenticated Stored Cross-Site Scripting Patched CVE-2024-1559 6.5 Krzysztof Zając February 19, 2024
Link Library <= 7.5.13 - Cross-Site Request Forgery via action_admin_init Patched CVE-2024-24875 4.3 Dhabaleshwar Das February 5, 2024
Link Library <= 7.5.13 - Reflected Cross-Site Scripting via 'link_price' and 'link_tags' Patched CVE-2024-24879 6.1 beluga February 5, 2024

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation