Skip to content
OpenAdvisories

Product · jackdewey

Link Library

8 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.1
    CVE-2026-18855

    Link Library <= 7.9.4 - Unauthenticated Arbitrary File Deletion via link_url Parameter

    The Link Library plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the ll_delete_link_fields function in all versions up to, and including, 7.9.4 This makes it possible for unauthenticated attackers to d…

    jackdewey Link Library Web / CMS