Link Library, CVE-2026-16535

CVE, Research URL: CVE-2026-16535
Home page URL: Security reports for Link Library
Application: Link Library
Published on: Aug 08, 2026
Research Description: The Link Library WordPress plugin before 7.9.4 does not sanitise and escape a parameter before reflecting it back in a response, allowing unauthenticated attackers to perform Reflected Cross-Site Scripting attacks against users who can be tricked into performing an action.
Affected versions: max 7.9.4.
Status: vulnerable