AUGUST 16, 2026
Live Feed
Back to database
Case File

CVE-2026-16535

MEDIUM · CVSS 6.1 EPSS 0.16%

Source: NVD + CISA KEV + EPSS · Published 2026-08-08 · Last synced 2026-08-16

CyberRota Analysis

AI-Generated

The Link Library WordPress plugin prior to version 7.9.4 is vulnerable to Reflected Cross-Site Scripting (XSS) due to inadequate sanitization and escaping of user input. This flaw allows unauthenticated attackers to execute malicious scripts in the context of users who are deceived into interacting with a crafted link. WordPress site administrators using this plugin should prioritize updating to the latest version to mitigate potential exploitation risks.

CVE
CVE-2026-16535
Severity
MEDIUM
CVSS
6.1
EPSS
0.16%
WordPress

Original NVD Description

The Link Library WordPress plugin before 7.9.4 does not sanitise and escape a parameter before reflecting it back in a response, allowing unauthenticated attackers to perform Reflected Cross-Site Scripting attacks against users who can be tricked into performing an action.