CVE-2026-78394

The Link Library WordPress plugin (versions before 7.9.6 ) is vulnerable to a path traversal flaw due to insufficient sanitization of the 'filepath' parameter. This allows users with the Contributor role or higher to create directories and write or overwrite image files anywhere the web server ha...