Link Library

Vulnerabilities

• CVE-2026-18855

  Link Library <= 7.9.4 - Unauthenticated Arbitrary File Deletion via link_url Parameter

  Critical 9.1

• CVE-2024-24875

  WordPress Link Library Plugin <= 7.5.13 is vulnerable to Cross Site Request Forgery (CSRF)

  High 8.8

• CVE-2026-40779

  WordPress Link Library plugin <= 7.8.8 - Arbitrary File Deletion vulnerability

  High 7.7

• CVE-2026-18197→ 7.9.4

  Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Link Library allows Cross-Site Scripti

  Medium 6.4

• CVE-2025-2889

  Link Library <= 7.7.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Link Additional Parameters

  Medium 6.4

• CVE-2024-13404

  Link Library <= 7.7.2 - Reflected Cross-Site Scripting

  Medium 6.1

• CVE-2024-38711

  WordPress Link Library plugin <= 7.7.1 - Reflected Cross Site Scripting (XSS) vulnerability

  Medium 6.1

• CVE-2024-35687

  WordPress Link Library plugin <= 7.6.3 - Reflected Cross-Site Scripting (XSS) vulnerability

  Medium 6.1

• CVE-2024-2325

  Link Library <= 7.6.6 - Reflected Cross-Site Scripting

  Medium 6.1

• CVE-2024-29123

  WordPress Link Library plugin <= 7.6 - Reflected Cross Site Scripting (XSS) vulnerability

  Medium 6.1

• CVE-2024-1559

  Link Library <= 7.6 - Unauthenticated Stored Cross-Site Scripting

  Medium 6.1

• CVE-2024-24879

  WordPress Link Library Plugin <= 7.5.13 is vulnerable to Cross Site Scripting (XSS)

  Medium 6.1

• CVE-2025-46237

  WordPress Link Library plugin <= 7.8 - Cross Site Scripting (XSS) Vulnerability

  Medium 5.4

• CVE-2024-4281

  Link Library <= 7.6.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via link-library Shortcode

  Medium 5.4

• CVE-2025-68600

  WordPress Link Library plugin <= 7.8.7 - Server Side Request Forgery (SSRF) vulnerability

  Medium 4.9