Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Link Library 7.10.0 Clear all filters
TI-2026-82286 CVE-2026-78396 · GHSA-v794-5r9j-cqr4

Link Library exposes contact data of hidden links to unauthenticated users

Priority LOW 25

The Link Library WordPress plugin before 7.10.0 does not verify that a requested link belongs to the settings set whose display template is used to render it, allowing unauthenticated users to disclose the telephone numb…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00206 Published 2026-10-29 Fixed in 7.10.0 CWE-200
TI-2026-82285 CVE-2026-78395 · GHSA-57vw-f9g4-3923

Link Library WordPress Plugin Login Requirement Bypass in Link Submission

Priority LOW 29

The Link Library WordPress plugin before 7.10.0 does not re-check the selected library's own login requirement when processing its front-end link submission, allowing unauthenticated users to submit links to a library co…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00182 Published 2026-10-29 Fixed in 7.10.0 CWE-862