Skip to content
Noroxi

ylefebvre records

18 published records for vendor ylefebvre.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
0
With a fix record
44.4%
Median publish → KEV
No record has entered KEV

Records by year

  1. 22
  2. 23
  3. 24
  4. 25
  5. 26

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

18 records
  • CVE-2024-24875
    35Monitor

    WordPress Link Library Plugin <= 7.5.13 is vulnerable to Cross Site Request Forgery (CSRF)

    HighCVSS 8.8No exploitEPSS 0%

    ylefebvre · link libraryFeb 12, 2024

  • CVE-2021-25093
    30Monitor

    Link Library < 7.2.8 - Unauthenticated Arbitrary Links Deletion

    HighCVSS 7.5No exploitEPSS 1%

    ylefebvre · link libraryFeb 1, 2022

  • CVE-2021-25092
    26Monitor

    Link Library < 7.2.8 - Library Settings Reset via CSRF

    MediumCVSS 6.5No exploitEPSS 0%

    ylefebvre · link libraryFeb 1, 2022

  • CVE-2026-18197
    25Monitor

    Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Link Library allows Cross-Site Scripti

    MediumCVSS 6.4No exploitEPSS 0%

    ylefebvre · link libraryJul 29, 2026

  • CVE-2021-25091
    24Monitor

    Link Library < 7.2.9 - Reflected Cross-Site Scripting

    MediumCVSS 6.1No exploitEPSS 1%

    ylefebvre · link libraryFeb 1, 2022

  • CVE-2024-29123
    24Monitor

    WordPress Link Library plugin <= 7.6 - Reflected Cross Site Scripting (XSS) vulnerability

    MediumCVSS 6.1No exploitEPSS 0%

    ylefebvre · link libraryMar 19, 2024

  • CVE-2024-1559
    24Monitor

    Link Library <= 7.6 - Unauthenticated Stored Cross-Site Scripting

    MediumCVSS 6.1No exploitEPSS 0%

    ylefebvre · link libraryFeb 20, 2024

  • CVE-2024-2325
    24Monitor

    Link Library <= 7.6.6 - Reflected Cross-Site Scripting

    MediumCVSS 6.1No exploitEPSS 0%

    ylefebvre · link libraryApr 9, 2024

  • CVE-2023-31071
    24Monitor

    WordPress Modal Dialog Plugin <= 3.5.14 is vulnerable to Cross Site Scripting (XSS)

    MediumCVSS 6.1No exploitEPSS 0%

    ylefebvre · modal dialogAug 17, 2023

  • CVE-2024-24879
    24Monitor

    WordPress Link Library Plugin <= 7.5.13 is vulnerable to Cross Site Scripting (XSS)

    MediumCVSS 6.1No exploitEPSS 0%

    ylefebvre · link libraryFeb 8, 2024

  • CVE-2024-38711
    24Monitor

    WordPress Link Library plugin <= 7.7.1 - Reflected Cross Site Scripting (XSS) vulnerability

    MediumCVSS 6.1No exploitEPSS 0%

    ylefebvre · link libraryJul 20, 2024

  • CVE-2024-35687
    24Monitor

    WordPress Link Library plugin <= 7.6.3 - Reflected Cross-Site Scripting (XSS) vulnerability

    MediumCVSS 6.1No exploitEPSS 0%

    ylefebvre · link libraryJun 8, 2024

  • CVE-2024-13404
    24Monitor

    Link Library <= 7.7.2 - Reflected Cross-Site Scripting

    MediumCVSS 6.1No exploitEPSS 0%

    ylefebvre · link libraryJan 21, 2025

  • CVE-2024-13441
    21Monitor

    Bilingual Linker <= 2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting

    MediumCVSS 5.4No exploitEPSS 0%

    ylefebvre · bilingual linkerJan 25, 2025

  • CVE-2024-4281
    21Monitor

    Link Library <= 7.6.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via link-library Shortcode

    MediumCVSS 5.4No exploitEPSS 0%

    ylefebvre · link libraryMay 8, 2024

  • CVE-2025-46237
    21Monitor

    WordPress Link Library plugin <= 7.8 - Cross Site Scripting (XSS) Vulnerability

    MediumCVSS 5.4No exploitEPSS 0%

    ylefebvre · link libraryApr 22, 2025

  • CVE-2022-4199
    19Monitor

    Link Library < 7.4.1 - Admin+ Stored XSS

    MediumCVSS 4.8No exploitEPSS 0%

    ylefebvre · link libraryJan 16, 2023

  • CVE-2023-24001
    19Monitor

    WordPress Modal Dialog Plugin <= 3.5.9 is vulnerable to Cross Site Scripting (XSS)

    MediumCVSS 4.8No exploitEPSS 0%

    ylefebvre · modal dialogApr 6, 2023