Jackdewey Link Library
6 CVEs affecting Jackdewey Link Library. Latest disclosed: 2026-08-15. Critical: 1, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-18855 | Critical | 9.1 | 2026-08-15 | The Link Library plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the ll_delete_link_fields function i… |
CVE-2024-1559 | Medium | 6.5 | 2024-02-20 | The Link Library plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'll_reciprocal' parameter in all versions up to, and including, 7.6… |
CVE-2025-2889 | Medium | 6.4 | 2025-04-05 | The Link Library plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Link Additional Parameters in all versions up to, and including, 7.7… |
CVE-2024-4281 | Medium | 6.4 | 2024-05-08 | The Link Library plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'link-library' shortcode in all versions up to, and includi… |
CVE-2024-13404 | Medium | 6.1 | 2025-01-21 | The Link Library plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'searchll' parameter in all versions up to, and including, 7.7.2… |
CVE-2024-2325 | Medium | 6.1 | 2024-04-09 | The Link Library plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the searchll parameter in all versions up to, and including, 7.6.6 du… |