Link Library
Link Library has 24 disclosed vulnerabilities in the WordSec catalog, reported between 2014 and 2026; all 24 are fixed as of September 2026. Their average CVSS score is 6.3, and the most serious one scores 9.1 out of 10. Severity breakdown: 1 critical and 3 high. 2024 was the busiest year with 8 disclosures.
The most common weakness is Cross-Site Scripting, behind 16 of the records (67%). Other recurring categories include Cross-Site Request Forgery (CSRF), Path Traversal.
Every one of the 24 issues recorded for Link Library has a vendor fix available, so running the current release closes all known holes.
19 independent researchers contributed these findings, most of them (6) reported by Krzysztof Zając. Link Library is installed on roughly 10,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.
CVE-2026-18855Link Library <= 7.9.4 - Unauthenticated Arbitrary File Deletion via link_url Parameter
Read the full analysisVulnerability Records
Link Library
Author
Yannick Lefebvre
This plugin is used to be able to create a page on your web site that will contain a list of all of the link categories that you have defined inside of the Links section of the WordPress administration, along with all links defined in these categories. The user can select a sub-set of categories to be displayed or not displayed. Link Library also offers a mode where only one category is shown at a time, using AJAX or HTML Get queries to load other categories based on user input. It can display a search box and find results based on queries. It can also display a form to accept user submissions and allow the site administrator to moderate them before listing the new entries. Finally, it can generate an RSS feed for your link collection so that people can be aware of additions to your link library. You can try it out in a temporary copy of WordPress here. For links that carry RSS feed information, Link Library can display a preview of the latest feed items inline with the all links or in a separate preview window. This plugin uses the filter method to add contents to the pages. It also contains a configuration page under the admin tools to be able to configure all outputs. This page allows for an unlimited number of different configurations to be created to display links on different pages of a WordPress site. For screenshots showing how to achieve these results, check out my site All pages are generated using different configurations all managed by Link Library. Link Library is compatible with the Simple Custom Post Order plugin to define category and link ordering. Changelog Support Forum
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C