Skip to content
OpenAdvisories
Medium · 5.3 CVE-2026-78396 EUVD-2026-112613GHSA-v794-5r9j-cqr4

Link Library < 7.10.0 - Unauthenticated Link Contact and Submitter Information Disclosure

Published Oct 29, 2026 · Updated Oct 29, 2026 · Assigned by WPScan

Description

The Link Library WordPress plugin before 7.10.0 does not verify that a requested link belongs to the settings set whose display template is used to render it, allowing unauthenticated users to disclose the telephone number, e-mail address and submitter name stored with links that the settings set is configured not to display.

Affected products

VendorProductAffectedFixed
— Link Library < 7.10.0 7.10.0

References