Yannick Lefebvre vulnerabilities
13 vulnerabilities
Known vulnerabilities in Yannick Lefebvre products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 4 products.
Products
4- Link Library8 vulnerabilities
- Modal Dialog3 vulnerabilities
- Bug Library1 vulnerabilities
- Community Events1 vulnerabilities
CVE-2025-68600wordpresslink-library+1
EPSS score0.14%
Server-Side Request Forgery (SSRF) vulnerability in Yannick Lefebvre Link Library link-library allows Server Side Request Forgery.This issue affects Link Library: from n/a through <= 7.8.7.CVE-2025-46237wordpresslink-library+2EPSS score0.22%
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Yannick Lefebvre Link Library link-library allows Stored XSS.This issue affects Link Library: from n/a through <= 7.8.CVE-2025-24728wordpressbug-library+1EPSS score0.51%
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Yannick Lefebvre Bug Library bug-library allows Blind SQL Injection.This issue affects Bug Library: from n/a through <= 2.1.4.CVE-2022-44742community_events_projectcommunity_events+2EPSS score0.39%
Auth. (admin+) Stored Cross-Site Scripting vulnerability in Yannick Lefebvre Community Events plugin <= 1.4.8 versions.CVE-2024-29123wordpresslink-library+2EPSS score0.42%
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Yannick Lefebvre Link Library allows Reflected XSS.This issue affects Link Library: from n/a through 7.6.CVE-2024-38711wordpresslink-library+2EPSS score0.35%
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Yannick Lefebvre Link Library allows Reflected XSS.This issue affects Link Library: from n/a through 7.7.1.CVE-2024-24879wordpresslink-library+2EPSS score0.38%
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Yannick Lefebvre Link Library allows Reflected XSS.This issue affects Link Library: from n/a through 7.5.13.CVE-2024-24875wordpresslink-library+2EPSS score0.21%
Cross-Site Request Forgery (CSRF) vulnerability in Yannick Lefebvre Link Library.This issue affects Link Library: from n/a through 7.5.13.CVE-2024-35687wordpresslink-library+2EPSS score0.33%
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Yannick Lefebvre Link Library link-library allows Reflected XSS.This issue affects Link Library: from n/a through 7.6.3.CVE-2026-40779wordpresslink-library+1EPSS score0.47%
Contributor Arbitrary File Deletion in Link Library <= 7.8.8 versions.CVE-2026-32367wordpressmodal-dialog+1EPSS score0.56%
Improper Control of Generation of Code ('Code Injection') vulnerability in Yannick Lefebvre Modal Dialog modal-dialog allows Remote Code Inclusion.This issue affects Modal Dialog: from n/a through <= 3.5.16.CVE-2023-31071wordpressmodal-dialog+2EPSS score0.38%
Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Yannick Lefebvre Modal Dialog plugin <= 3.5.14 versions.CVE-2023-24001wordpressmodal-dialog+2EPSS score0.39%
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Yannick Lefebvre Modal Dialog plugin <= 3.5.9 versions.