Link Library
Approved changes feed: RSS · Atom
cpe:2.3:a:unknown:link_library:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Unknown (668ca391-a6cc-5e33-879b-83885214de33) |
|---|---|
| Product | Link Library (5752eb64-cd4d-55ad-ba9c-2790ca4a63b8) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-78395 |
vulnerable | 2026-11-03 10:17:19.971993 |
Link Library < 7.10.0 - Unauthenticated Link Submission Login Requirement Bypass
The Link Library WordPress plugin before 7.10.0 does not re-check the selected library's own login requirement when processing its front-end link submission, allowing unauthenticated users to submit links to a library configured to require login by reusing a form token obtained from another library that does not.
Published: 2026-10-29T06:00:22.791Z
Updated: 2026-10-29T10:56:08.732Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-78392 |
vulnerable | 2026-11-03 10:17:19.898691 |
Link Library < 7.9.6 - Contributor+ Stored XSS via 'link_target' Parameter
The Link Library WordPress plugin before 7.9.6 does not sanitise and escape a link field before outputting it inside an attribute of a link preview, allowing users with the Contributor role and above to perform Stored Cross-Site Scripting attacks. The preview is generated without authentication and without checking whether the link has been published, so an unapproved submission is enough to reach any visitor who opens it.
Published: 2026-10-22T06:00:18.482Z
Updated: 2026-10-22T11:06:28.662Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-78396 |
vulnerable | 2026-11-03 10:17:19.875791 |
Link Library < 7.10.0 - Unauthenticated Link Contact and Submitter Information Disclosure
The Link Library WordPress plugin before 7.10.0 does not verify that a requested link belongs to the settings set whose display template is used to render it, allowing unauthenticated users to disclose the telephone number, e-mail address and submitter name stored with links that the settings set is configured not to display.
Published: 2026-10-29T06:00:22.964Z
Updated: 2026-10-29T10:56:08.584Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-16535 |
vulnerable | 2026-09-16 04:32:56.899801 |
Link Library < 7.9.4 - Reflected XSS via Thumbs-Rating likelabel
The Link Library WordPress plugin before 7.9.4 does not sanitise and escape a parameter before reflecting it back in a response, allowing unauthenticated attackers to perform Reflected Cross-Site Scripting attacks against users who can be tricked into performing an action.
Published: 2026-08-08T06:00:11.068Z
Updated: 2026-08-10T19:08:24.244Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-16532 |
vulnerable | 2026-09-16 04:32:56.426134 |
Link Library < 7.9.3 - Unauthenticated SQL Injection via the Front-End Link Submission Form
The Link Library WordPress plugin before 7.9.3 does not properly sanitise and escape a user-supplied value before using it in a SQL query, allowing unauthenticated users to perform SQL injection attacks.
Published: 2026-08-03T06:00:10.791Z
Updated: 2026-08-03T17:01:28.911Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-4199 |
vulnerable | 2026-06-08 05:51:36.960460 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-25093 |
vulnerable | 2026-06-08 05:30:39.948704 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-25092 |
vulnerable | 2026-06-08 05:30:39.948264 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-25091 |
vulnerable | 2026-06-08 05:30:39.947204 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.