CVE-2026-78397

The Link Library WordPress plugin (versions 7.8.8 through 7.9.5 ) is vulnerable to an unauthenticated SSRF due to insufficient validation of user-supplied URLs. When a safe request is rejected, the plugin falls back to an unprotected fetch, allowing attackers to force the site to issue requests t...

CVE-2026-78397 Link Library < 7.9.6 - Unauthenticated SSRF via Reciprocal Link Validation

The Link Library WordPress plugin before 7.9.6 does not validate the destination of a user-supplied URL before falling back to an unprotected fetch when its safe request is rejected, allowing unauthenticated visitors to make the site issue requests to hosts on its internal network and to learn fr...

CVE-2026-78397 Link Library < 7.9.6 - Unauthenticated SSRF via Reciprocal Link Validation

The Link Library WordPress plugin before 7.9.6 does not validate the destination of a user-supplied URL before falling back to an unprotected fetch when its safe request is rejected, allowing unauthenticated visitors to make the site issue requests to hosts on its internal network and to learn fr...

EUVD-2026-86529

The Link Library WordPress plugin before 7.9.6 does not validate the destination of a user-supplied URL before falling back to an unprotected fetch when its safe request is rejected, allowing unauthenticated visitors to make the site issue requests to hosts on its internal network and to learn fr...