Skip to content
OpenAdvisories

Vendor

jackdewey

18 known vulnerabilities.

Products

Link Library 8 Community Events 7 Events Listing Widget 1 Tune Library 1 Bilingual Linker 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Critical 9.1
    CVE-2026-18855

    Link Library <= 7.9.4 - Unauthenticated Arbitrary File Deletion via link_url Parameter

    The Link Library plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the ll_delete_link_fields function in all versions up to, and including, 7.9.4 This makes it possible for unauthenticated attackers to d…

    jackdewey Link Library Web / CMS
  • Critical 9.8
    CVE-2025-10586

    Community Events <= 1.5.1 - Unauthenticated SQL Injection

    The Community Events plugin for WordPress is vulnerable to SQL Injection via the ‘event_venue’ parameter in all versions up to, and including, 1.5.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing…

    jackdewey Community Events Web / CMS
  • Critical 9.8
    CVE-2025-10587

    Community Events <= 1.5.1 - Unauthenticated SQL Injection

    The Community Events plugin for WordPress is vulnerable to SQL Injection via the event_category parameter in all versions up to, and including, 1.5.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existin…

    jackdewey Community Events Web / CMS