CVE-2026-16532

Name of the Vulnerable Software and Affected Versions Link Library versions prior to 7.9.3

Description The Link Library WordPress plugin fails to properly sanitize and escape user-supplied values before incorporating them into a SQL query. This flaw allows unauthenticated users to execute SQL injection attacks via the front-end link submission form. SQL injection is a technique where malicious SQL statements are inserted into entry fields for execution, potentially allowing unauthorized access to or manipulation of the database.

Recommendations Update the plugin to version 7.9.3 or later.