CVE-2026-40779: WordPress Link Library plugin <= 7.8.8 - Arbitrary File Deletion vulnerability
Published Jun 15, 2026
·Updated
Contributor Arbitrary File Deletion in Link Library <= 7.8.8 versions.
Affected Software
1 affected component
Link Library WordPress Link Library plugin<=7.8.8
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
WordPress Link Library Pluginto a version that resolves this vulnerability.Fixed in 7.8.9
Event History
Jun 15, 2026
CVE Published
via MITRE·08:18 PM
Data Sourced
via MITRE·08:18 PM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·09:16 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Who can exploit this issue?
An attacker needs Contributor-level access to a WordPress site using an affected Link Library version. No user interaction is required.
2
What is the impact of successful exploitation?
The vulnerability allows arbitrary file deletion through path traversal. Its availability impact is rated high, and the scope may extend beyond the vulnerable component.
3
Which versions are affected?
Link Library versions 7.8.8 and earlier are identified as affected.