CVE-2026-78395
CVE-2026-78395 · Link Library < 7.10.0 - Unauthenticated Link Submission Login Requirement Bypass
Esta página presenta datos de fuentes públicas de vulnerabilidades. Consulta el aviso original antes de actualizar.
The Link Library WordPress plugin before 7.10.0 does not re-check the selected library's own login requirement when processing its front-end link submission, allowing unauthenticated users to submit links to a library configured to require login by reusing a form token obtained from another library that does not.
CVSS 5.3 · Media · EPSS 0,2% · Corrección disponible
- Publicación
- Actualización
Productos y versiones afectados
link library
- Versiones
- ≥ 0, < 7.10.0: Afectada (semver)
Actualiza a 7.10.0