Improper Authentication in Link Library Plugin for WordPress
CVE-2026-78395
Currently unrated
Key Information:
- Vendor
WordPress
- Status
- Vendor
- CVE Published:
- 29 October 2026
Badges
👾 Exploit Exists🟡 Public PoC
What is CVE-2026-78395?
The Link Library plugin for WordPress, specifically versions prior to 7.10.0, has a security flaw that neglects to verify the authentication requirements when processing front-end link submissions. This oversight allows unauthorized users to submit links to a library that is typically secured behind a login. By reusing a form token from another library that does not impose login restrictions, attackers can exploit this vulnerability. Administrators are advised to update to the latest version to mitigate this risk.
Affected Version(s)
Link Library 0 < 7.10.0
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.