Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

15 records

Vendor: jackdewey Component: Link Library Clear all filters
TI-2026-14971 CVE-2026-18197 · GHSA-c9gj-8f9h-hp8h

Cross-site scripting in Link Library

Priority LOW 28

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Link Library allows Cross-Site Scripting (XSS).

CVSS 4.0MEDIUM 6.4 Network No auth User interaction EPSS 0.00276 Published 2026-07-29 Fixed in 7.9.4 CWE-79
TI-2025-28989 CVE-2025-46237 · GHSA-c86v-34qq-wvpw

WordPress Link Library plugin <= 7.8 - Cross Site Scripting (XSS) Vulnerability

Priority LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Yannick Lefebvre Link Library link-library allows Stored XSS.This issue affects Link Library: from n/a through <= 7.8.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.0022 Published 2025-04-22 No fix listed CWE-79
TI-2024-12446 CVE-2024-13404 · GHSA-jxhr-pqx8-rqj9

Link Library <= 7.7.2 - Reflected Cross-Site Scripting

Priority LOW 27

The Link Library plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'searchll' parameter in all versions up to, and including, 7.7.2 due to insufficient input sanitization and output escaping.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00299 Published 2025-01-21 No fix listed CWE-79
TI-2024-23556 CVE-2024-35687 · GHSA-jmx6-85w7-8gpc

WordPress Link Library plugin <= 7.6.3 - Reflected Cross-Site Scripting (XSS) vulnerability

Priority LOW 31

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Yannick Lefebvre Link Library link-library allows Reflected XSS.This issue affects Link Library: from n/a throu…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00327 Published 2024-06-08 No fix listed CWE-79
TI-2024-03985 CVE-2024-4281 · GHSA-cmhw-5vpw-rf3m

Link Library <= 7.6.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via link-library Shortcode

Priority LOW 28

The Link Library plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'link-library' shortcode in all versions up to, and including, 7.6.11 due to insufficient input sanitization and output…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00263 Published 2024-05-08 No fix listed CWE-79
TI-2024-02160 CVE-2024-2325 · GHSA-x67v-qcqh-2rvg

Link Library <= 7.6.6 - Reflected Cross-Site Scripting

Priority LOW 27

The Link Library plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the searchll parameter in all versions up to, and including, 7.6.6 due to insufficient input sanitization and output escaping.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00409 Published 2024-04-09 No fix listed CWE-79
TI-2024-01455 CVE-2024-1559 · GHSA-f3rg-5m66-h824

Link Library <= 7.6 - Unauthenticated Stored Cross-Site Scripting

Priority LOW 35

The Link Library plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'll_reciprocal' parameter in all versions up to, and including, 7.6 due to insufficient input sanitization and output escaping.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00415 Published 2024-02-20 No fix listed CWE-79
TI-2024-16393 CVE-2024-24879 · GHSA-2cwx-f949-qq48

WordPress Link Library Plugin <= 7.5.13 is vulnerable to Cross Site Scripting (XSS)

Priority LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Yannick Lefebvre Link Library allows Reflected XSS.This issue affects Link Library: from n/a through 7.5.13.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00375 Published 2024-02-08 No fix listed CWE-79
TI-2022-03844 CVE-2022-4199 · GHSA-v84j-mc7q-38q3

Link Library < 7.4.1 - Admin+ Stored XSS

Priority MEDIUM 55

The Link Library WordPress plugin before 7.4.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilter…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00475 Published 2023-01-16 Fixed in 7.4.1
TI-2021-07371 CVE-2021-25093 · GHSA-4j83-364h-wcgq

Link Library < 7.2.8 - Unauthenticated Arbitrary Links Deletion

Priority LOW 35

The Link Library WordPress plugin before 7.2.8 does not have authorisation in place when deleting links, allowing unauthenticated users to delete arbitrary links via a crafted request

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01196 Published 2022-02-01 Fixed in 7.2.8 CWE-862
TI-2021-07370 CVE-2021-25092 · GHSA-79qc-m83g-g4j5

Link Library < 7.2.8 - Library Settings Reset via CSRF

Priority LOW 29

The Link Library WordPress plugin before 7.2.8 does not have CSRF check when resetting library settings, allowing attackers to make a logged in admin reset arbitrary settings via a CSRF attack

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.0048 Published 2022-02-01 Fixed in 7.2.8 CWE-352
TI-2021-07369 CVE-2021-25091 · GHSA-76j9-mfwr-cgfp

Link Library < 7.2.9 - Reflected Cross-Site Scripting

Priority LOW 29

The Link Library WordPress plugin before 7.2.9 does not sanitise and escape the settingscopy parameter before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.008 Published 2022-02-01 Fixed in 7.2.9 CWE-79