Skip to content
OpenAdvisories

Product · jackdewey

Link Library

8 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.2
    CVE-2026-116537

    Link Library <= 7.10.0 - Unauthenticated Stored Cross-Site Scripting via 'link_description' Parameter

    The Link Library plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'link_description' parameter in all versions up to, and including, 7.10.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthe…

    jackdewey Link Library Web / CMS
  • High 7.5
    CVE-2026-15090

    Link Library <= 7.9.2 - Unauthenticated SQL Injection via 'link_url' Parameter

    The Link Library plugin for WordPress is vulnerable to time-based SQL Injection via the 'link_url' parameter in all versions up to, and including, 7.9.2 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the exis…

    jackdewey Link Library Web / CMS