CVE-2021-25093: Ylefebvre Link Library

High severity, CVSS 7.5. EPSS: 1.2% chance of exploitation in the next 30 days.

The Link Library WordPress plugin before 7.2.8 does not have authorisation in place when deleting links, allowing unauthenticated users to delete arbitrary links via a crafted request

Affected products

• Ylefebvre Link Library: before 7.2.8 (fixed in 7.2.8)

Published 2022-02-01. Last modified 2026-06-17.