medium5.3
CVE-2026-78395
The Link Library WordPress plugin before 7.10.0 does not re-check the selected library's own login requirement when processing its front-end link submission, a…
Impact
The Link Library WordPress plugin before 7.10.0 does not re-check the selected library's own login requirement when processing its front-end link submission, allowing unauthenticated users to submit links to a library configured to require login by reusing a form token obtained from another library that does not.
Affected products
| Product | Affected versions |
|---|---|
| Link Library WordPress Plugin | before 7.10.0 |
Versions were read from the advisory text. No structured product data has been published for this record yet.