WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
link-library
Published
2025-12-24
Title
Link Library < 7.8.8 - Authenticated (Contributor+) Server-Side Request Forgery
Slug
link-library
Published
2026-04-22
Title
Link Library < 7.8.9 - Authenticated (Contributor+) Arbitrary File Deletion
Slug
link-library
Published
2026-07-29
Title
Link Library < 7.9.4 - Reflected Cross-Site Scripting
Slug
link-library
Published
2026-07-23
Title
Link Library < 7.9.3 - Unauthenticated SQL Injection via the Front-End Link Submission Form
Slug
link-library
Published
2026-08-03
Title
Link Library < 7.9.4 - Reflected XSS via Thumbs-Rating likelabel
Slug
link-library
Published
2026-08-14
Title
Link Library < 7.9.5 - Unauthenticated Arbitrary File Deletion via link_url Parameter
Slug
link-list-manager
Published
2021-12-14
Title
Link List Manager <= 1.0 - Reflected Cross-Site Scripting
Slug
link-log
Published
2015-12-10
Title
Link Log < 2.0 - HTTP Response Splitting
Slug
link-log
Published
2015-12-11
Title
Link Log < 2.1 - SQL Injection
Slug
link-log
Published
2023-12-05
Title
Smart External Link Click Monitor [Link Log] <= 5.0.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
link-log
Published
2023-12-05
Title
Smart External Link Click Monitor [Link Log] <= 5.0.2 - Reflected Cross-Site Scripting
Slug
link-optimizer-lite
Published
2022-08-02
Title
Link Optimizer Lite <= 1.4.5 - Stored Cross-Site Scripting via CSRF
Slug
link-party
Published
2024-01-23
Title
illi Link Party! <= 1.0 - Unauthenticated Arbitrary Link Deletion
Slug
link-party
Published
2024-01-23
Title
illi Link Party! <= 1.0 - Settings Update via CSRF
Slug
link-party
Published
2024-01-23
Title
illi Link Party! <= 1.0 - Admin+ Stored Cross-Site Scripting
Slug
link-party
Published
2024-01-23
Title
illi Link Party! <= 1.0 - Unauthenticated Stored XSS
Slug
link-preview
Published
2026-06-23
Title
URL Preview <= 1.0 - Unauthenticated Server-Side Request Forgery via 'url' Parameter
Slug
link-shield
Published
2025-04-09
Title
Link Shield <= 0.5.4 - Authenticated (Admin+) Stored Cross-Site Scripting
Slug
link-shield
Published
2025-06-12
Title
Link Shield <= 0.5.4 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
link-to-bible
Published
2024-07-06
Title
Link To Bible < 2.5.10 - Administrator+ Stored XSS
Slug
link-to-url-post
Published
2025-02-03
Title
Link to URL / Post <= 1.3 - Authenticated (Administrator+) SQL Injection
Slug
link-view
Published
2025-08-19
Title
Link View <= 0.8.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
link-view
Published
2025-08-25
Title
Link View <= 0.8.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
link-whisper
Published
2023-11-20
Title
Link Whisper Free < 0.6.6 - Authenticated (Contributor+) SQL Injection
Slug
link-whisper
Published
2024-03-15
Title
Link Whisper Free < 0.6.9 - Reflected Cross-Site Scripting