CVE-2026-16535

Published: Ago 08, 2026 Last Modified: Ago 08, 2026
ExploitDB:
Other exploit source:
Google Dorks:

Description

AI Translation Available

The Link Library WordPress plugin before 7.9.4 does not sanitise and escape a parameter before reflecting it back in a response, allowing unauthenticated attackers to perform Reflected Cross-Site Scripting attacks against users who can be tricked into performing an action.

EPSS (Exploit Prediction Scoring System)

Trend Analysis

EPSS (Exploit Prediction Scoring System)

Prevede la probabilità di sfruttamento basata su intelligence sulle minacce e sulle caratteristiche della vulnerabilità.

EPSS Score
0,0017
Percentile
0,1th
Updated

EPSS Score Trend (Last 2 Days)

https://wpscan.com/vulnerability/3b6c0efb-c503-437a-8f9b-f8…
https://wpscan.com/vulnerability/3b6c0efb-c503-437a-8f9b-f8a8c032313c/