3 matches found
CVE-2026-78395
The Link Library WordPress plugin before 7.10.0 does not re-check the selected library's own login requirement when processing its front-end link submission, allowing unauthenticated users to submit links to a library configured to require login by reusing a form token obtained from another libra...
EUVD-2026-112612
The Link Library WordPress plugin before 7.10.0 does not re-check the selected library's own login requirement when processing its front-end link submission, allowing unauthenticated users to submit links to a library configured to require login by reusing a form token obtained from another libra...
CVE-2026-78395
The Link Library WordPress plugin (versions before 7.10.0 ) is vulnerable to an unauthenticated link submission login requirement bypass . The root cause is that the plugin fails to re-verify the specific login requirements of a selected library during front-end link submission. This allows unaut...