Advisories · Technology

Yannick Lefebvre Link Library.

Every CVE that names Yannick Lefebvre Link Library among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-40779 CVE record

CVSS 7.7 High

WordPress Link Library plugin <= 7.8.8 - Arbitrary File Deletion vulnerability
- Yannick Lefebvre Link Library
- Path traversal
Not analysed yet 15 Jun 2026
CVE-2025-68600 CVE record

CVSS 4.9 Medium

WordPress Link Library plugin <= 7.8.7 - Server Side Request Forgery (SSRF) vulnerability
- Yannick Lefebvre Link Library
- Server-side request forgery (SSRF)
Not analysed yet 24 Dec 2025
CVE-2025-46237 CVE record

CVSS 6.5 Medium

WordPress Link Library plugin <= 7.8 - Cross Site Scripting (XSS) Vulnerability
- Yannick Lefebvre Link Library
- Cross-site scripting (XSS)
Not analysed yet 22 Apr 2025
CVE-2024-38711 CVE record

CVSS 7.1 High

WordPress Link Library plugin <= 7.7.1 - Reflected Cross Site Scripting (XSS) vulnerability
- Yannick Lefebvre Link Library
- Cross-site scripting (XSS)
Not analysed yet 20 Jul 2024
CVE-2024-35687 CVE record

CVSS 7.1 High

WordPress Link Library plugin <= 7.6.3 - Reflected Cross-Site Scripting (XSS) vulnerability
- Yannick Lefebvre Link Library
- Cross-site scripting (XSS)
Not analysed yet 8 Jun 2024
CVE-2024-29123 CVE record

CVSS 7.1 High

WordPress Link Library plugin <= 7.6 - Reflected Cross Site Scripting (XSS) vulnerability
- Yannick Lefebvre Link Library
- Cross-site scripting (XSS)
Not analysed yet 19 Mar 2024
CVE-2024-24875 CVE record

CVSS 4.3 Medium

WordPress Link Library Plugin <= 7.5.13 is vulnerable to Cross Site Request Forgery (CSRF)
- Yannick Lefebvre Link Library
- Cross-site request forgery (CSRF)
Not analysed yet 12 Feb 2024
CVE-2024-24879 CVE record

CVSS 7.1 High

WordPress Link Library Plugin <= 7.5.13 is vulnerable to Cross Site Scripting (XSS)
- Yannick Lefebvre Link Library
- Cross-site scripting (XSS)
Not analysed yet 8 Feb 2024