Medium
CVE-2026-78394
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 27
Reset filters
High
CVE-2026-78397
Link Library <= 7.9.5 - Unauthenticated Server-Side Request Forgery
Medium
CVE-2026-78393
Link Library <= 7.9.5 - Reflected Cross-Site Scripting
Critical
CVE-2026-18855
Link Library <= 7.9.4 - Unauthenticated Arbitrary File Deletion via link_url Parameter
Medium
CVE-2026-16535
Link Library <= 7.9.3 - Reflected Cross-Site Scripting
Medium
CVE-2026-18197
Link Library < 7.9.4 - Reflected Cross-Site Scripting
High
CVE-2026-16532
Link Library <= 7.9.2 - Unauthenticated SQL Injection
High
CVE-2026-40779
Link Library <= 7.8.8 - Authenticated (Contributor+) Arbitrary File Deletion
Medium
CVE-2025-68600
Link Library <= 7.8.7 - Authenticated (Contributor+) Server-Side Request Forgery
Medium
CVE-2025-14354
Resource Library for Logged In Users <= 1.5 - Cross-Site Request Forgery to Multiple Administrative Actions
Medium
CVE-2025-46237
Link Library <= 7.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-2889
Link Library <= 7.7.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Link Additional Parameters
Medium
CVE-2024-13404
Link Library <= 7.7.2 - Reflected Cross-Site Scripting
Medium
CVE-2024-38711
Link Library <= 7.7.1 - Reflected Cross-Site Scripting
Medium
CVE-2024-35687
Link Library <= 7.6.3 - Reflected Cross-Site Scripting
Medium
CVE-2024-4281
Link Library <= 7.6.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via link-library Shortcode
Medium
CVE-2024-29123
Link Library <= 7.6 - Reflected Cross-Site Scripting
Medium
CVE-2024-2325
Link Library <= 7.6.6 - Reflected Cross-Site Scripting
Medium
CVE-2024-1559
Link Library <= 7.6 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2024-24879
Link Library <= 7.5.13 - Reflected Cross-Site Scripting via 'link_price' and 'link_tags'
Medium
CVE-2022-4199
Link Library <= 7.4 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2021-25092
Link Library <= 7.2.7 - Cross-Site Request Forgery to Library Settings Reset
Medium
CVE-2021-25091
Link Library <= 7.2.8 - Reflected Cross-Site Scripting
Medium
CVE-2021-25093
Link Library <= 7.2.7 - Missing Authorization Checks
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.