CVE-2021-25093: vulnerability in Link Library
Link Library < 7.2.8 - Unauthenticated Arbitrary Links Deletion
Published · Updated
3Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackepss 1.2%
exploitation probability
1.2%top 32% of all CVEs
observed exploitation
nono source reports it
The Link Library WordPress plugin before 7.2.8 does not have authorisation in place when deleting links, allowing unauthenticated users to delete arbitrary links via a crafted request
Affected products
Unknown · Link LibraryRelated CVEs — Link Library
In the same product, most dangerous first.
CVE-2021-25091—Link Library < 7.2.9 - Reflected Cross-Site ScriptingEPSS 0.8%CVE-2026-16535MEDIUMLink Library < 7.9.4 - Reflected XSS via Thumbs-Rating likelabelEPSS 0.5%CVE-2021-25092—Link Library < 7.2.8 - Library Settings Reset via CSRFEPSS 0.5%CVE-2022-4199MEDIUMLink Library < 7.4.1 - Admin+ Stored XSSEPSS 0.5%CVE-2026-16532CRITICALLink Library < 7.9.3 - Unauthenticated SQL Injection via the Front-End Link Submission FormEPSS 0.5%CVE-2026-78392MEDIUMLink Library < 7.9.6 - Contributor+ Stored XSS via 'link_target' ParameterEPSS 0.3%