Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Release: Link Library 7.9.6 Clear all filters
TI-2026-54520 CVE-2026-78397 · GHSA-6rpr-h6cv-7xm2

Link Library < 7.9.6 - Unauthenticated SSRF via Reciprocal Link Validation

Priority LOW 18

The Link Library WordPress plugin before 7.9.6 does not validate the destination of a user-supplied URL before falling back to an unprotected fetch when its safe request is rejected, allowing unauthenticated visitors to…

CVSS 3.1MEDIUM 4.0 Network No auth No interaction EPSS 0.00157 Published 2026-09-25 Fixed in 7.9.6 CWE-918
TI-2026-54519 CVE-2026-78394 · GHSA-qx4g-fv3v-h498

Link Library < 7.9.6 - Contributor+ Path Traversal via 'filepath' Parameter

Priority LOW 19

The Link Library WordPress plugin before 7.9.6 does not sanitize a user-supplied destination folder before writing a generated image to disk, allowing users with the Contributor role and above to create directories and w…

CVSS 3.1MEDIUM 4.1 Network High privileges No interaction EPSS 0.00233 Published 2026-09-25 Fixed in 7.9.6 CWE-22
TI-2026-54518 CVE-2026-78393 · GHSA-gch2-fmrm-hv85

Link Library < 7.9.6 - Reflected XSS via 'link_tags' and 'link_price' Sort and Breadcrumb Links

Priority LOW 26

The Link Library WordPress plugin before 7.9.6 does not properly escape some parameters before outputting them in the addresses of links it generates on its front-end directory pages, leading to Reflected Cross-Site Scri…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00144 Published 2026-09-25 Fixed in 7.9.6 CWE-79