Link Library
Ylefebvre · 15 CVEs
Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Link Library allo…
Jul 29, 2026
WordPress Link Library plugin <= 7.8 - Cross Site Scripting (XSS) Vulnerability
Apr 22, 2025
Link Library <= 7.7.2 - Reflected Cross-Site Scripting
Jan 21, 2025
WordPress Link Library plugin <= 7.7.1 - Reflected Cross Site Scripting (XSS) vulnerability
Jul 20, 2024
WordPress Link Library plugin <= 7.6.3 - Reflected Cross-Site Scripting (XSS) vulnerability
Jun 8, 2024
Link Library <= 7.6.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via link-library Shortcode
May 8, 2024
Link Library <= 7.6.6 - Reflected Cross-Site Scripting
Apr 9, 2024
WordPress Link Library plugin <= 7.6 - Reflected Cross Site Scripting (XSS) vulnerability
Mar 19, 2024
Link Library <= 7.6 - Unauthenticated Stored Cross-Site Scripting
Feb 20, 2024
WordPress Link Library Plugin <= 7.5.13 is vulnerable to Cross Site Request Forgery (CSRF)
Feb 12, 2024
WordPress Link Library Plugin <= 7.5.13 is vulnerable to Cross Site Scripting (XSS)
Feb 8, 2024
Link Library < 7.4.1 - Admin+ Stored XSS
Jan 16, 2023
Link Library < 7.2.8 - Unauthenticated Arbitrary Links Deletion
Feb 1, 2022
Link Library < 7.2.8 - Library Settings Reset via CSRF
Feb 1, 2022
Link Library < 7.2.9 - Reflected Cross-Site Scripting
Feb 1, 2022
| CVE ID | Description | Severity | EPSS | Published |
|---|---|---|---|---|
| CVE-2026-18197 | Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Link Library allows Cross-Site Scripting (XSS). This issu… | MEDIUM | 0.28% | Jul 29, 2026 |
| CVE-2025-46237 | WordPress Link Library plugin <= 7.8 - Cross Site Scripting (XSS) Vulnerability | MEDIUM | 0.22% | Apr 22, 2025 |
| CVE-2024-13404 | Link Library <= 7.7.2 - Reflected Cross-Site Scripting | MEDIUM | 0.29% | Jan 21, 2025 |
| CVE-2024-38711 | WordPress Link Library plugin <= 7.7.1 - Reflected Cross Site Scripting (XSS) vulnerability | HIGH | 0.35% | Jul 20, 2024 |
| CVE-2024-35687 | WordPress Link Library plugin <= 7.6.3 - Reflected Cross-Site Scripting (XSS) vulnerability | HIGH | 0.33% | Jun 8, 2024 |
| CVE-2024-4281 | Link Library <= 7.6.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via link-library Shortcode | MEDIUM | 0.26% | May 8, 2024 |
| CVE-2024-2325 | Link Library <= 7.6.6 - Reflected Cross-Site Scripting | MEDIUM | 0.41% | Apr 9, 2024 |
| CVE-2024-29123 | WordPress Link Library plugin <= 7.6 - Reflected Cross Site Scripting (XSS) vulnerability | HIGH | 0.42% | Mar 19, 2024 |
| CVE-2024-1559 | Link Library <= 7.6 - Unauthenticated Stored Cross-Site Scripting | MEDIUM | 0.41% | Feb 20, 2024 |
| CVE-2024-24875 | WordPress Link Library Plugin <= 7.5.13 is vulnerable to Cross Site Request Forgery (CSRF) | HIGH | 0.21% | Feb 12, 2024 |
| CVE-2024-24879 | WordPress Link Library Plugin <= 7.5.13 is vulnerable to Cross Site Scripting (XSS) | HIGH | 0.38% | Feb 8, 2024 |
| CVE-2022-4199 | Link Library < 7.4.1 - Admin+ Stored XSS | MEDIUM | 0.47% | Jan 16, 2023 |
| CVE-2021-25093 | Link Library < 7.2.8 - Unauthenticated Arbitrary Links Deletion | HIGH | 1.20% | Feb 1, 2022 |
| CVE-2021-25092 | Link Library < 7.2.8 - Library Settings Reset via CSRF | MEDIUM | 0.48% | Feb 1, 2022 |
| CVE-2021-25091 | Link Library < 7.2.9 - Reflected Cross-Site Scripting | MEDIUM | 0.80% | Feb 1, 2022 |
Showing 1 to 15 of 15 CVEs