Jackdewey vulnerabilities
We track 7 vulnerabilities in Jackdewey products across 2 products. 7 are rated high or critical, and none are known to be exploited. The most recent was published on November 7, 2026.
Latest Jackdewey vulnerabilities
- 7.2 High severity
Link Library: Improper Neutralization of Input During Web Page Generation
The Link Library plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'link_description' parameter in all versions up to, and including, 7.10.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthen
- 7.5 High severity
Link Library: Improper Neutralization of Special Elements used in an SQL Command
The Link Library plugin for WordPress is vulnerable to time-based SQL Injection via the 'link_url' parameter in all versions up to, and including, 7.9.2 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the exist
- 9.1 Critical severity
Link Library: Improper Limitation of a Pathname to a Restricted Directory
The Link Library plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the ll_delete_link_fields function in all versions up to, and including, 7.9.4 This makes it possible for unauthenticated attackers to de
- 7.5 High severity
Community Events: Improper Neutralization of Special Elements used in an SQL Command
The Community Events plugin for WordPress is vulnerable to SQL Injection via the 'dayofyear' parameter in all versions up to, and including, 1.5.4 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQ
- 7.2 High severity
Community Events: Improper Neutralization of Input During Web Page Generation
The Community Events plugin for WordPress is vulnerable to Stored Cross-Site Scripting via event details parameter in all versions up to, and including, 1.5.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticate
- 9.8 Critical severity
Community Events: Improper Neutralization of Special Elements used in an SQL Command
The Community Events plugin for WordPress is vulnerable to SQL Injection via the ‘event_venue’ parameter in all versions up to, and including, 1.5.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing
- 9.8 Critical severity
Community Events: Improper Neutralization of Special Elements used in an SQL Command
The Community Events plugin for WordPress is vulnerable to SQL Injection via the event_category parameter in all versions up to, and including, 1.5.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing