WordPress Link Library plugin < 7.9.6 - Reflected XSS vulnerability

Reflected XSS vulnerability discovered by Karthik Ramakrishnan in WordPress Plugin Link Library versions 7.9.6...

CVE-2026-78394

The Link Library WordPress plugin before 7.9.6 does not sanitize a user-supplied destination folder before writing a generated image to disk, allowing users with the Contributor role and above to create directories and write or overwrite image files anywhere the web server can write, including...

CVE-2026-78393

The Link Library WordPress plugin before 7.9.6 does not properly escape some parameters before outputting them in the addresses of links it generates on its front-end directory pages, leading to Reflected Cross-Site Scripting which could be used against any visitor, including logged-in...

CVE-2026-78397

The Link Library WordPress plugin before 7.9.6 does not validate the destination of a user-supplied URL before falling back to an unprotected fetch when its safe request is rejected, allowing unauthenticated visitors to make the site issue requests to hosts on its internal network and to learn fr...

WordPress Link Library plugin < 7.9.6 - Contributor+ Path Traversal vulnerability

Contributor+ Path Traversal vulnerability discovered by Karthik Ramakrishnan in WordPress Plugin Link Library versions 7.9.6...

CVE-2026-78393

The Link Library WordPress plugin (versions before 7.9.6 ) is vulnerable to Reflected Cross-Site Scripting (XSS) . The root cause is the failure to properly escape certain parameters—specifically the link_tags and link_price parameters—when generating link addresses on front-end directory pages. ...

WordPress Link Library plugin < 7.9.6 - Unauthenticated SSRF vulnerability

Unauthenticated SSRF vulnerability discovered by Charles Vosburgh in WordPress Plugin Link Library versions 7.9.6...

CVE-2026-78394 Link Library < 7.9.6 - Contributor+ Path Traversal via 'filepath' Parameter

The Link Library WordPress plugin before 7.9.6 does not sanitize a user-supplied destination folder before writing a generated image to disk, allowing users with the Contributor role and above to create directories and write or overwrite image files anywhere the web server can write, including...

CVE-2026-78397 Link Library < 7.9.6 - Unauthenticated SSRF via Reciprocal Link Validation

The Link Library WordPress plugin before 7.9.6 does not validate the destination of a user-supplied URL before falling back to an unprotected fetch when its safe request is rejected, allowing unauthenticated visitors to make the site issue requests to hosts on its internal network and to learn fr...

CVE-2026-78394

The Link Library WordPress plugin versions before 7.9.6 is vulnerable to a path traversal flaw due to insufficient sanitization of a user-supplied destination folder (specifically the 'filepath' parameter) during image generation. This allows users with Contributor roles or higher to create direc...

CVE-2026-78393 Link Library < 7.9.6 - Reflected XSS via 'link_tags' and 'link_price' Sort and Breadcrumb Links

The Link Library WordPress plugin before 7.9.6 does not properly escape some parameters before outputting them in the addresses of links it generates on its front-end directory pages, leading to Reflected Cross-Site Scripting which could be used against any visitor, including logged-in...

CVE-2026-78393 Link Library < 7.9.6 - Reflected XSS via 'link_tags' and 'link_price' Sort and Breadcrumb Links

The Link Library WordPress plugin before 7.9.6 does not properly escape some parameters before outputting them in the addresses of links it generates on its front-end directory pages, leading to Reflected Cross-Site Scripting which could be used against any visitor, including logged-in...

EUVD-2026-86527

The Link Library WordPress plugin before 7.9.6 does not properly escape some parameters before outputting them in the addresses of links it generates on its front-end directory pages, leading to Reflected Cross-Site Scripting which could be used against any visitor, including logged-in...

CVE-2026-78397

The Link Library WordPress plugin (versions 7.8.8 through 7.9.5 ) is vulnerable to an unauthenticated SSRF due to insufficient validation of user-supplied URLs. When a safe request is rejected, the plugin falls back to an unprotected fetch, allowing attackers to force the site to issue requests t...

CVE-2026-78394 Link Library < 7.9.6 - Contributor+ Path Traversal via 'filepath' Parameter

The Link Library WordPress plugin before 7.9.6 does not sanitize a user-supplied destination folder before writing a generated image to disk, allowing users with the Contributor role and above to create directories and write or overwrite image files anywhere the web server can write, including...

EUVD-2026-86529

The Link Library WordPress plugin before 7.9.6 does not validate the destination of a user-supplied URL before falling back to an unprotected fetch when its safe request is rejected, allowing unauthenticated visitors to make the site issue requests to hosts on its internal network and to learn fr...

CVE-2026-78397 Link Library < 7.9.6 - Unauthenticated SSRF via Reciprocal Link Validation

The Link Library WordPress plugin before 7.9.6 does not validate the destination of a user-supplied URL before falling back to an unprotected fetch when its safe request is rejected, allowing unauthenticated visitors to make the site issue requests to hosts on its internal network and to learn fr...

EUVD-2026-86528

The Link Library WordPress plugin before 7.9.6 does not sanitize a user-supplied destination folder before writing a generated image to disk, allowing users with the Contributor role and above to create directories and write or overwrite image files anywhere the web server can write, including...

CVE-2026-78394: Improper Limitation of a Pathname to a Restricted Directory

The Link Library WordPress plugin before 7.9.6 does not sanitize a user-supplied destination folder before writing a generated image to disk, allowing users with the Contributor role and above to create directories and write or overwrite image files anywhere the web server can write, including...

CVE-2026-78397: Server-Side Request Forgery (SSRF)

The Link Library WordPress plugin before 7.9.6 does not validate the destination of a user-supplied URL before falling back to an unprotected fetch when its safe request is rejected, allowing unauthenticated visitors to make the site issue requests to hosts on its internal network and to learn fr...