critical9.1
CVE-2026-16532
The Link Library WordPress plugin before 7.9.3 does not properly sanitise and escape a user-supplied value before using it in a SQL query, allowing unauthentic…
Impact
The Link Library WordPress plugin before 7.9.3 does not properly sanitise and escape a user-supplied value before using it in a SQL query, allowing unauthenticated users to perform SQL injection attacks.
Affected products
| Product | Affected versions |
|---|---|
| Link Library WordPress Plugin | before 7.9.3 |
Versions were read from the advisory text. No structured product data has been published for this record yet.