Link Library

Wordfence Intelligence   >   Vulnerability Database   >   WordPress Plugins   >   Link Library

Information

Software Type Plugin
Software Slug link-library (view on wordpress.org)
Software Status Active
Software Author jackdewey
Software Website wordpress.org
Software Downloads 2,269,286
Software Active Installs 10,000
Software Record Last Updated April 27, 2024

12 Vulnerabilities

Link Library <= 7.6 - Reflected Cross-Site Scripting
6.1
CVE-2024-29123
Mar 16, 2024
Researcher: stealthcopter
Link Library <= 7.6.6 - Reflected Cross-Site Scripting
6.1
CVE-2024-2325
Mar 13, 2024
Researcher: Krzysztof Zając
Link Library <= 7.6 - Unauthenticated Stored Cross-Site Scripting
6.5
CVE-2024-1559
Feb 19, 2024
Researcher: Krzysztof Zając
Link Library <= 7.5.13 - Reflected Cross-Site Scripting via 'link_price' and 'link_tags'
6.1
CVE-2024-24879
Feb 5, 2024
Researcher: beluga
Link Library <= 7.5.13 - Cross-Site Request Forgery via action_admin_init
4.3
CVE-2024-24875
Feb 5, 2024
Researcher: Dhabaleshwar Das
Link Library <= 7.4 - Authenticated (Admin+) Stored Cross-Site Scripting
5.5
CVE-2022-4199
Dec 23, 2022
Researcher: iohex
Link Library <= 7.2.7 - Missing Authorization Checks
5.3
CVE-2021-25093
Dec 30, 2021
Researcher: Krzysztof Zając
Link Library <= 7.2.8 - Reflected Cross-Site Scripting
6.1
CVE-2021-25091
Dec 30, 2021
Researcher: Krzysztof Zając
Link Library <= 7.2.7 - Cross-Site Request Forgery to Library Settings Reset
4.3
CVE-2021-25092
Dec 30, 2021
Researcher: Krzysztof Zając
Link Library <= 5.9.13.26 – SQL Injection
7.2
CVE ID Unknown
Aug 14, 2017
Researcher: Lenon Leite
Link Library <= 5.9.12.29 - Reflected Cross-Site Scripting
6.1
CVE ID Unknown
Aug 15, 2016
Researcher: Burak Kelebek
Link Library <= 5.8.10.6 - Reflected Cross-Site Scripting
6.1
CVE ID Unknown
Nov 8, 2014
Researcher: Kacper Szurek
Title CVE ID CVSS Researchers Date
Link Library <= 7.6 - Reflected Cross-Site Scripting CVE-2024-29123 6.1 stealthcopter March 16, 2024
Link Library <= 7.6.6 - Reflected Cross-Site Scripting CVE-2024-2325 6.1 Krzysztof Zając March 13, 2024
Link Library <= 7.6 - Unauthenticated Stored Cross-Site Scripting CVE-2024-1559 6.5 Krzysztof Zając February 19, 2024
Link Library <= 7.5.13 - Reflected Cross-Site Scripting via 'link_price' and 'link_tags' CVE-2024-24879 6.1 beluga February 5, 2024
Link Library <= 7.5.13 - Cross-Site Request Forgery via action_admin_init CVE-2024-24875 4.3 Dhabaleshwar Das February 5, 2024
Link Library <= 7.4 - Authenticated (Admin+) Stored Cross-Site Scripting CVE-2022-4199 5.5 iohex December 23, 2022
Link Library <= 7.2.7 - Missing Authorization Checks CVE-2021-25093 5.3 Krzysztof Zając December 30, 2021
Link Library <= 7.2.8 - Reflected Cross-Site Scripting CVE-2021-25091 6.1 Krzysztof Zając December 30, 2021
Link Library <= 7.2.7 - Cross-Site Request Forgery to Library Settings Reset CVE-2021-25092 4.3 Krzysztof Zając December 30, 2021
Link Library <= 5.9.13.26 – SQL Injection 7.2 Lenon Leite August 14, 2017
Link Library <= 5.9.12.29 - Reflected Cross-Site Scripting 6.1 Burak Kelebek August 15, 2016
Link Library <= 5.8.10.6 - Reflected Cross-Site Scripting 6.1 Kacper Szurek November 8, 2014

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation