CVE-2026-78397

Name of the Vulnerable Software and Affected Versions Link Library WordPress plugin versions prior to 7.9.6

Description An issue exists where the plugin fails to validate the destination of a user-supplied URL before falling back to an unprotected fetch when a safe request is rejected. This allows unauthenticated visitors to perform Server-Side Request Forgery (SSRF), a technique where an attacker forces a server to make requests to internal network hosts to query or modify information from internal services and determine if those services are active based on the response.

Recommendations Update the Link Library WordPress plugin to version 7.9.6 or later.