Plugin icon

Link Library

link-library

Vulnerabilities:

23

Last Updated:

April 26, 2026

Active Installs:

10000

Published
Title
Fixed in
CVSS
Published
2026-04-22
Title
Link Library < 7.8.9 - Authenticated (Contributor+) Arbitrary File Deletion
Fixed in
Fixed in 7.8.9
CVSS
6.5 (medium)
Published
2025-12-24
Title
Link Library < 7.8.8 - Authenticated (Contributor+) Server-Side Request Forgery
Fixed in
Fixed in 7.8.8
CVSS
5.5 (medium)
Published
2025-04-22
Title
Link Library < 7.8.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Fixed in
Fixed in 7.8.1
CVSS
6.4 (medium)
Published
2025-04-04
Title
Link Library < 7.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Link Additional Parameters
Fixed in
Fixed in 7.8
CVSS
6.4 (medium)
Published
2025-01-20
Title
Link Library < 7.7.3 - Reflected Cross-Site Scripting
Fixed in
Fixed in 7.7.3
CVSS
6.1 (medium)
Published
2024-07-11
Title
Link Library < 7.7.2 - Reflected Cross-Site Scripting
Fixed in
Fixed in 7.7.2
CVSS
6.1 (medium)
Published
2024-06-06
Title
Link Library < 7.6.4 - Reflected Cross-Site Scripting
Fixed in
Fixed in 7.6.4
CVSS
6.1 (medium)
Published
2024-05-07
Title
Link Library < 7.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via link-library Shortcode
Fixed in
Fixed in 7.7
CVSS
6.4 (medium)
Published
2024-03-16
Title
Link Library < 7.6.1 - Reflected Cross-Site Scripting
Fixed in
Fixed in 7.6.1
CVSS
6.1 (medium)
Published
2024-03-13
Title
Link Library < 7.6.7 - Reflected Cross-Site Scripting
Fixed in
Fixed in 7.6.7
CVSS
6.1 (medium)
Published
2024-02-19
Title
Link Library < 7.6.1 - Unauthenticated Stored Cross-Site Scripting
Fixed in
Fixed in 7.6.1
CVSS
6.5 (medium)
Published
2024-02-05
Title
Link Library < 7.6 - Cross-Site Request Forgery via action_admin_init
Fixed in
Fixed in 7.6
CVSS
4.3 (medium)
Published
2024-02-05
Title
Link Library < 7.6 - Reflected Cross-Site Scripting via 'link_price' and 'link_tags'
Fixed in
Fixed in 7.6
CVSS
6.1 (medium)
Published
2022-12-23
Title
Link Library < 7.4.1 - Admin+ Stored XSS
Fixed in
Fixed in 7.4.1
CVSS
3.4 (low)
Published
2021-12-30
Title
Link Library < 7.2.8 - Library Settings Reset via CSRF
Fixed in
Fixed in 7.2.8
CVSS
5.4 (medium)
Published
2021-12-30
Title
Link Library < 7.2.9 - Reflected Cross-Site Scripting
Fixed in
Fixed in 7.2.9
CVSS
6.1 (medium)
Published
2021-12-30
Title
Link Library < 7.2.8 - Unauthenticated Arbitrary Links Deletion
Fixed in
Fixed in 7.2.8
CVSS
5.3 (medium)
Published
2017-08-14
Title
Link-Library <= 5.9.13.26 – Authenticated SQL Injection
Fixed in
Fixed in 5.9.13.27
CVSS
n/a
Published
2016-08-15
Title
Link Library <= 5.9.12.29 - Authenticated Reflected Cross-Site Scripting (XSS)
Fixed in
Fixed in 5.9.12.30
CVSS
n/a
Published
2014-08-01
Title
Link Library < 5.7.9.7 - SQL Injection
Fixed in
Fixed in 5.7.9.7
CVSS
n/a
Published
2014-08-01
Title
Link Library 5.1.6 - link-library-ajax.php Multiple Parameter SQL Injection
Fixed in
Fixed in 5.1.7
CVSS
n/a
Published
2014-08-01
Title
Link Library 5.0.8 - wp-content/plugins/link-library/tracker.php id Parameter SQL Injection
Fixed in
Fixed in 5.0.9
CVSS
n/a
Published
2014-08-01
Title
Link Library 5.0.8 - wp-content/plugins/link-library/tracker.php id Parameter XSS
Fixed in
Fixed in 5.0.9
CVSS
n/a