CVE-2026-18855

creationtimestamp| type| source ---|---|--- 2026-08-15 19:20:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mt5fdjdx7v2y 2026-08-15 20:00:00+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mt5hkvmn2y27 2026-08-15 21:28:33+00:00| seen|...

CVE-2026-18855 Link Library <= 7.9.4 - Unauthenticated Arbitrary File Deletion via link_url Parameter

The Link Library plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the lldeletelinkfields function in all versions up to, and including, 7.9.4 This makes it possible for unauthenticated attackers to delete arbitrary files on the server, whic...