These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.
The Link Library WordPress plugin before 7.9.6 does not validate the destination of a user-supplied URL before falling back to an unprotected fetch when its safe request is rejected, allowing unauthenticated visitors to make the site issue requests to hosts on its internal network and to learn from the response whether an internal service answered.
The Link Library WordPress plugin before 7.9.6 does not sanitize a user-supplied destination folder before writing a generated image to disk, allowing users with the Contributor role and above to create directories and write or overwrite image files anywhere the web server can write, including outside the site's document root. This vulnerability could lead to potential directory creation and file overwrit [truncated]
The Link Library WordPress plugin before 7.9.6 does not properly escape some parameters before outputting them in the addresses of links it generates on its front-end directory pages, leading to Reflected Cross-Site Scripting which could be used against any visitor, including logged-in administrators. This vulnerability requires attention from defenders responsible for WordPress installations with the Lin [truncated]
The Link Library WordPress plugin before 7.9.4 does not sanitise and escape a parameter before reflecting it back in a response, allowing unauthenticated attackers to perform Reflected Cross-Site Scripting attacks against users who can be tricked into performing an action. This CVE record was published on 2026-08-08T07:17:10.013Z. The vulnerability has a CVSS score of 6.1 and is classified as MEDIUM sever [truncated]
The Link Library WordPress plugin before version 7.9.3 is vulnerable to SQL injection attacks due to improper sanitization and escaping of user-supplied values used in SQL queries. This could allow unauthenticated users to perform malicious database queries. The vulnerability's technical impact is related to the potential for data breaches or unauthorized database modifications. Affected systems may inclu [truncated]