Critical severity9.1NVD Advisory· Published Aug 3, 2026· Updated Aug 26, 2026

CVE-2026-16532

Description

The Link Library WordPress plugin before 7.9.3 does not properly sanitise and escape a user-supplied value before using it in a SQL query, allowing unauthenticated users to perform SQL injection attacks.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

WordPress/Link Libraryllm-fuzzy2 versions
<7.9.3+ 1 more
- (no CPE)range: <7.9.3
- (no CPE)range: <7.9.3
Package: https://wordpress.org/plugins/link-library

Patches

Vulnerability mechanics

References

wpscan.com/vulnerability/da3b8caa-ac99-4097-8286-f3c418ddb63d/nvd

News mentions

No linked articles in our index yet.

cvss	0.591
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000