Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

Link Library — Vulnerabilities & Security Advisories 24

All 24 CVE vulnerabilities found in Link Library, with AI-generated Chinese analysis, references, and POCs.

This section aggregates known security vulnerabilities for Link Library, a software product that exhibits specific weakness types. It collects publicly disclosed advisories and related flaw records, covering the period from the product's initial release through the most recent security updates. Here you can track vendor-published alerts, analyze recurring weakness classes, and review the complete vulnerability history associated with this product.

Vendor: Unknown

CVE ID Title CVSS Severity Published
CVE-2026-78397 Link Library < 7.9.6 - Unauthenticated SSRF via Reciprocal Link Validation - - 2026-09-25
CVE-2026-78394 Link Library < 7.9.6 - Contributor+ Path Traversal via 'filepath' Parameter - - 2026-09-25
CVE-2026-78393 Link Library < 7.9.6 - Reflected XSS via 'link_tags' and 'link_price' Sort and Breadcrumb Links - - 2026-09-25
CVE-2026-18855 Link Library <= 7.9.4 - Unauthenticated Arbitrary File Deletion via link_url Parameter CWE-22 9.1 Critical 2026-08-15
CVE-2026-16535 Link Library < 7.9.4 - Reflected XSS via Thumbs-Rating likelabel - - 2026-08-08
CVE-2026-16532 Link Library < 7.9.3 - Unauthenticated SQL Injection via the Front-End Link Submission Form - - 2026-08-03
CVE-2026-18197 WordPress Link Library 跨站脚本漏洞 CWE-79 6.4 Medium 2026-07-29
CVE-2026-40779 WordPress Link Library plugin <= 7.8.8 - Arbitrary File Deletion vulnerability CWE-22 7.7 High 2026-06-15
CVE-2025-68600 WordPress Link Library plugin <= 7.8.7 - Server Side Request Forgery (SSRF) vulnerability CWE-918 4.9 Medium 2025-12-24
CVE-2025-46237 WordPress Link Library plugin <= 7.8 - Cross Site Scripting (XSS) Vulnerability CWE-79 6.5 Medium 2025-04-22
CVE-2025-2889 Link Library <= 7.7.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Link Additional Parameters CWE-79 6.4 Medium 2025-04-04
CVE-2024-13404 Link Library <= 7.7.2 - Reflected Cross-Site Scripting CWE-79 6.1 Medium 2025-01-21
CVE-2024-38711 WordPress Link Library plugin <= 7.7.1 - Reflected Cross Site Scripting (XSS) vulnerability CWE-79 7.1 High 2024-07-20
CVE-2024-35687 WordPress Link Library plugin <= 7.6.3 - Reflected Cross-Site Scripting (XSS) vulnerability CWE-79 7.1 High 2024-06-08
CVE-2024-4281 Link Library <= 7.6.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via link-library Shortcode CWE-79 6.4 Medium 2024-05-08
CVE-2024-2325 Link Library <= 7.6.6 - Reflected Cross-Site Scripting CWE-79 6.1 Medium 2024-04-09
CVE-2024-29123 WordPress Link Library plugin <= 7.6 - Reflected Cross Site Scripting (XSS) vulnerability CWE-79 7.1 High 2024-03-19
CVE-2024-1559 Link Library <= 7.6 - Unauthenticated Stored Cross-Site Scripting CWE-79 6.5 Medium 2024-02-20
CVE-2024-24875 WordPress Link Library Plugin <= 7.5.13 is vulnerable to Cross Site Request Forgery (CSRF) CWE-352 4.3 Medium 2024-02-12
CVE-2024-24879 WordPress Link Library Plugin <= 7.5.13 is vulnerable to Cross Site Scripting (XSS) CWE-79 7.1 High 2024-02-08
CVE-2022-4199 Link Library < 7.4.1 - Admin+ Stored XSS 4.8 - 2023-01-16
CVE-2021-25093 Link Library < 7.2.8 - Unauthenticated Arbitrary Links Deletion CWE-862 7.5 - 2022-02-01
CVE-2021-25092 Link Library < 7.2.8 - Library Settings Reset via CSRF CWE-352 6.5 - 2022-02-01
CVE-2021-25091 Link Library < 7.2.9 - Reflected Cross-Site Scripting CWE-79 6.1 - 2022-02-01

All 24 known CVE vulnerabilities affecting Link Library with full Chinese analysis, references, and POCs where available.