Link Library vulnerabilities

3 known vulnerabilities in Link Library from Jackdewey. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.2 High severity

  Link Library: Improper Neutralization of Input During Web Page Generation

  CVE-2026-116537Nov 7, 2026Jackdewey

  The Link Library plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'link_description' parameter in all versions up to, and including, 7.10.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthen

• 7.5 High severity

  Link Library: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2026-15090Oct 15, 2026Jackdewey

  The Link Library plugin for WordPress is vulnerable to time-based SQL Injection via the 'link_url' parameter in all versions up to, and including, 7.9.2 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the exist

• 9.1 Critical severity

  Link Library: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2026-18855Aug 15, 2026JackdeweyEPSS 1.35%

  The Link Library plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the ll_delete_link_fields function in all versions up to, and including, 7.9.4 This makes it possible for unauthenticated attackers to de