Yannick Lefebvre vulnerabilities
Published CVEs affecting Yannick Lefebvre products: 3 record(s), with severity, exploitation and fixes.
CVE-2026-40779
High · 7.7
CWE-22 Jun 15, 2026
WordPress Link Library plugin <= 7.8.8 - Arbitrary File Deletion vulnerability
Contributor Arbitrary File Deletion in Link Library <= 7.8.8 versions.
CVE-2026-32367
Critical · 9.1
CWE-94 Mar 13, 2026
WordPress Modal Dialog plugin <= 3.5.16 - Remote Code Execution (RCE) vulnerability
Improper Control of Generation of Code ('Code Injection') vulnerability in Yannick Lefebvre Modal Dialog modal-dialog allows Remote Code Inclusion.This issue affects Modal Dialog: from n/a through <= 3.5.16.
CVE-2025-68600
Medium · 4.9
CWE-918 Dec 24, 2025
WordPress Link Library plugin <= 7.8.7 - Server Side Request Forgery (SSRF) vulnerability
Server-Side Request Forgery (SSRF) vulnerability in Yannick Lefebvre Link Library link-library allows Server Side Request Forgery.This issue affects Link Library: from n/a through <= 7.8.7.