Skip to content
PluginCanary

Link Library

by Yannick Lefebvre · 10,000+ active installs · Checked 4 Nov 2026
Healthy

Healthy: maintained, last release 1 Nov 2026, 21 releases in 24 months, no unpatched vulnerabilities.

81/ 100 Canary Score
Sub-scores for Link Library
Ownership100
Maintenance100
Security60
Support70
Reputation70

How the score works

Quick answers

Is Link Library still maintained?
Yes. Last release 1 Nov 2026, 21 releases in the last 24 months. 1 Nov 2026 · wordpress.org
Who owns Link Library, and has it changed hands?
No change recorded. Main committer jackdewey since Mar 2005. 4 Nov 2026 · SVN log
Was Link Library removed from wordpress.org?
No. Listed on wordpress.org as of 4 Nov 2026. 4 Nov 2026 · wordpress.org
Is Link Library safe?
31 known vulnerabilities, all fixed (latest in 7.10.0). Not on the exploited list. 26 Oct 2026 · Wordfence Intelligence
Is the latest Link Library update safe to install?
No ownership change before 7.10.1. No one-star spike after it. 1 Nov 2026 · Release history

Active signals

Facts we detected, with links to the source.

No open risk signals. Signals appear here when we detect an ownership change, closure, vulnerability or decline.

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
jackdewey18 Mar 2005 to 1 Nov 2026, 1111 commits

1 committer recorded. No ownership change since 2005.

Maintenance

Last release
3 days ago
Releases, 24 months
21
Tested up to
7.1 current
Requires PHP
not stated supported 8.2+
Releases per quarter
Releases per quarter for Link Library
Q1 202412
Q2 20242
Q3 20241
Q4 20240
Q1 20252
Q2 20252
Q3 20252
Q4 20251
Q1 20263
Q2 20264
Q3 20265
Q4 20262

Last release 1 Nov 2026. Tested with WordPress 7.1 (current).

Reputation

Last 90 days: no reviews. Lifetime: 4.7.

Average rating per quarter for Link Library
Q1 20245.0
Q2 20242.0
Q4 20255.0

Average rating stayed at 5.0 between Q1 2024 and Q4 2025.

Rating distribution
5 star77
4 star13
3 star3
2 star2
1 star2
Latest low reviews

Security record

16 vulnerabilities in 24 months (31 on record), all patched (latest fixed in 7.10.0).

Show 31 patched vulnerabilities
PublishedIssueCVSSAffectedFixed inDays to patch
26 Oct 2026Link Library <= 7.9.0 - Unauthenticated Information Exposure5.3<= 7.9.07.10.0Patched before disclosure
26 Oct 2026Link Library <= 7.9.0 - Missing Authorization5.3<= 7.9.07.10.0Patched before disclosure
20 Oct 2026Link Library <= 7.9.5 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4<= 7.9.57.9.6Patched before disclosure
14 Oct 2026Link Library <= 7.9.2 - Unauthenticated SQL Injection via 'link_url' Parameter7.5<= 7.9.27.9.3Patched before disclosure
23 Sep 2026Link Library <= 7.9.5 - Reflected Cross-Site Scripting6.1<= 7.9.57.9.6Patched before disclosure
23 Sep 2026Link Library <= 7.9.5 - Authenticated (Contributor+) Path Traversal4.3<= 7.9.57.9.6Patched before disclosure
23 Sep 2026Link Library <= 7.9.5 - Unauthenticated Server-Side Request Forgery7.2<= 7.9.57.9.6Patched before disclosure
14 Aug 2026Link Library <= 7.9.4 - Unauthenticated Arbitrary File Deletion via link_url Parameter9.1<= 7.9.47.9.5Patched before disclosure
3 Aug 2026Link Library <= 7.9.3 - Reflected Cross-Site Scripting6.1<= 7.9.37.9.4Patched before disclosure
29 Jul 2026Link Library < 7.9.4 - Reflected Cross-Site Scripting6.1< 7.9.47.9.4Patched before disclosure
23 Jul 2026Link Library <= 7.9.2 - Unauthenticated SQL Injection7.5<= 7.9.27.9.3Patched before disclosure
22 Apr 2026Link Library <= 7.8.8 - Authenticated (Contributor+) Arbitrary File Deletion8.1<= 7.8.87.8.9Patched before disclosure
24 Dec 2025Link Library <= 7.8.7 - Authenticated (Contributor+) Server-Side Request Forgery6.4<= 7.8.77.8.896
22 Apr 2025Link Library <= 7.8 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4<= 7.87.8.1Patched before disclosure
4 Apr 2025Link Library <= 7.7.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Link Additional Parameters6.4<= 7.7.37.8Patched before disclosure
20 Jan 2025Link Library <= 7.7.2 - Reflected Cross-Site Scripting6.1<= 7.7.27.7.31
11 Jul 2024Link Library <= 7.7.1 - Reflected Cross-Site Scripting6.1<= 7.7.17.7.2Patched before disclosure
6 Jun 2024Link Library <= 7.6.3 - Reflected Cross-Site Scripting6.1<= 7.6.37.6.4Patched before disclosure
7 May 2024Link Library <= 7.6.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via link-library Shortcode6.4<= 7.6.117.7Patched before disclosure
16 Mar 2024Link Library <= 7.6 - Reflected Cross-Site Scripting6.1<= 7.67.6.1Patched before disclosure
13 Mar 2024Link Library <= 7.6.6 - Reflected Cross-Site Scripting6.1<= 7.6.67.6.7Patched before disclosure
19 Feb 2024Link Library <= 7.6 - Unauthenticated Stored Cross-Site Scripting6.5<= 7.67.6.1Patched before disclosure
5 Feb 2024Link Library <= 7.5.13 - Cross-Site Request Forgery via action_admin_init4.3<= 7.5.137.6Patched before disclosure
5 Feb 2024Link Library <= 7.5.13 - Reflected Cross-Site Scripting via 'link_price' and 'link_tags'6.1<= 7.5.137.6Patched before disclosure
23 Dec 2022Link Library <= 7.4 - Authenticated (Admin+) Stored Cross-Site Scripting5.5<= 7.47.4.1Patched before disclosure

Changelog mentions of security fixes: 7.9.3 (security); 7.9.4 (security); 7.9.5 (security); 7.9.6 (security); 7.9.7 (security).

Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.

Support

67% of 3 support threads resolved in the last 2 months.

Momentum

10,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for Link Library
4 May 2026490
11 May 2026644
18 May 2026733
25 May 2026586
1 Jun 2026620
8 Jun 2026381
15 Jun 2026414
22 Jun 2026312
29 Jun 2026320
6 Jul 2026350
13 Jul 2026336
20 Jul 20265,179
27 Jul 20265,332
3 Aug 20261,096
10 Aug 20265,087
17 Aug 20261,433
24 Aug 20265,440
31 Aug 20261,086
7 Sep 20265,363
14 Sep 2026993
21 Sep 2026918
28 Sep 2026930
5 Oct 2026642
12 Oct 2026891
19 Oct 20266,449
26 Oct 20261,954
2 Nov 20263,623

Weekly downloads over the last 4 weeks are 69% above the 27-week average.

Healthier alternatives

Same job, rated Healthy, higher Canary Score and at least 10,000 installs. Never sponsored.

Simple Job BoardScore 92 · 10,000+HireZootScore 91 · 30,000+WP Job ManagerScore 90 · 70,000+Business Directory PluginScore 88 · 10,000+GeoDirectoryScore 86 · 10,000+

Facts

Version7.10.1
AuthorYannick Lefebvre
Added17 Mar 2005
Last updated1 Nov 2026
Active installs10,000+
Requires WordPress4.4
Tested up to7.1.4
Requires PHPnot stated
CategoryContent Management > Document Management & Downloads
Tagslink, list, page, library, directory

Other plugins by this author: Modal Dialog, Weekly Schedule, Bug Library, Bilingual Linker, Events Listing Widget, Community Events, Tune Library

Questions

Is Link Library still maintained?

Yes. Last release 1 Nov 2026, 21 releases in the last 24 months.

Who owns Link Library, and has it changed hands?

No change recorded. Main committer jackdewey since Mar 2005.

Was Link Library removed from wordpress.org?

No. Listed on wordpress.org as of 4 Nov 2026.

Is Link Library safe?

31 known vulnerabilities, all fixed (latest in 7.10.0). Not on the exploited list.

Is the latest Link Library update safe to install?

No ownership change before 7.10.1. No one-star spike after it.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews and support forum, Wordfence Intelligence, CISA KEV, NVD.Plugin data refreshed 4 Nov 2026.Report a data issue