CVE-2026-16535

UNKNOWN 0.0

Link Library < 7.9.4 - Reflected XSS via Thumbs-Rating likelabel

CVSS Score

0.0

EPSS Score

0.0%

EPSS Percentile

0th

The Link Library WordPress plugin before 7.9.4 does not sanitise and escape a parameter before reflecting it back in a response, allowing unauthenticated attackers to perform Reflected Cross-Site Scripting attacks against users who can be tricked into performing an action.

Vendor	unknown
Product	link library
Published	Aug 8, 2026

Stay Ahead of the Next One

Get instant alerts for unknown link library

Be the first to know when new unknown vulnerabilities affecting unknown link library are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

Affected Versions

Unknown / Link Library

0 < 7.9.4

References

NVD ↗ CVE.org ↗ EPSS Data ↗

wpscan.com: https://wpscan.com/vulnerability/3b6c0efb-c503-437a-8f9b-f8a8c032313c/

Credits

João Ramos Maciel WPScan