WordPress Plugin Vulnerabilities | Page 28 | WPScan

0-9
a
b
c
d
e
f
g
h
i
j
k
l
m
n
o
p
q
r
s
t
u
v
w
x
y
z

Slug

Published

2021-12-30

Title

Link Library < 7.2.9 - Reflected Cross-Site Scripting

Slug

Published

2021-12-30

Title

Link Library < 7.2.8 - Library Settings Reset via CSRF

Slug

Published

2021-12-30

Title

Link Library < 7.2.8 - Unauthenticated Arbitrary Links Deletion

Slug

Published

2022-12-23

Title

Link Library < 7.4.1 - Admin+ Stored XSS

Slug

Published

2024-02-05

Title

Link Library < 7.6 - Reflected Cross-Site Scripting via 'link_price' and 'link_tags'

Slug

Published

2024-02-05

Title

Link Library < 7.6 - Cross-Site Request Forgery via action_admin_init

Slug

Published

2024-02-19

Title

Link Library < 7.6.1 - Unauthenticated Stored Cross-Site Scripting

Slug

Published

2024-03-13

Title

Link Library < 7.6.7 - Reflected Cross-Site Scripting

Slug

Published

2024-03-16

Title

Link Library < 7.6.1 - Reflected Cross-Site Scripting

Slug

Published

2024-05-07

Title

Link Library < 7.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via link-library Shortcode

Slug

Published

2024-06-06

Title

Link Library < 7.6.4 - Reflected Cross-Site Scripting

Slug

Published

2024-07-11

Title

Link Library < 7.7.2 - Reflected Cross-Site Scripting

Slug

Published

2025-01-20

Title

Link Library < 7.7.3 - Reflected Cross-Site Scripting

Slug

Published

2025-04-04

Title

Link Library < 7.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Link Additional Parameters

Slug

Published

2025-04-22

Title

Link Library < 7.8.1 - Authenticated (Contributor+) Stored Cross-Site Scripting

Slug

Published

2025-12-24

Title

Link Library < 7.8.8 - Authenticated (Contributor+) Server-Side Request Forgery

Slug

Published

2026-04-22

Title

Link Library < 7.8.9 - Authenticated (Contributor+) Arbitrary File Deletion

Slug

Published

2026-07-29

Title

Link Library < 7.9.4 - Reflected Cross-Site Scripting

Slug

Published

2026-07-23

Title

Link Library < 7.9.3 - Unauthenticated SQL Injection via the Front-End Link Submission Form

Slug

Published

2026-08-03

Title

Link Library < 7.9.4 - Reflected XSS via Thumbs-Rating likelabel

Slug

Published

2026-08-14

Title

Link Library < 7.9.5 - Unauthenticated Arbitrary File Deletion via link_url Parameter

Slug

Published

2026-10-14

Title

Link Library < 7.9.3 - Unauthenticated SQL Injection via 'link_url' Parameter

Slug

Published

2026-09-23

Title

Link Library < 7.9.6 - Unauthenticated SSRF via Reciprocal Link Validation

Slug

Published

2026-09-23

Title

Link Library < 7.9.6 - Reflected XSS via 'link_tags' and 'link_price' Sort and Breadcrumb Links

Slug

Published

2026-09-23

Title

Link Library < 7.9.6 - Contributor+ Path Traversal via 'filepath' Parameter