Vulnerability · Published Oct 29, 2026 · Assigned by WPScan
CVE-2026-78395Link Library < 7.10.0 - Unauthenticated Link Submission Login Requirement Bypass
Medium 5.3
In plain English
A medium-severity missing authorization in Link Library from Unknown. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 8% of all known vulnerabilities).
Severity (CVSS 3.1)5.3Medium
Exploit odds (30 days)0.2%top 92.2% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
The Link Library WordPress plugin before 7.10.0 does not re-check the selected library's own login requirement when processing its front-end link submission, allowing unauthenticated users to submit links to a library configured to require login by reusing a form token obtained from another library that does not.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Unknown | Link Library | 0 – before 7.10.0 |
Weakness: CWE-862 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
References
- https://wpscan.com/vulnerability/e2cf7d5f-b9c9-4320-9fc8-4ac8c6d24f78/ exploit, vdb-entry, technical-description