A vulnerability has been found in jackdewey Link Library Plugin up to 7.9.2 on WordPress and classified as critical. This issue affects some unknown processing. The manipulation of the argument link_url leads to sql injection. This vulnerability is traded as CVE-2026-15090. It is possible to initiate the attack remotely. There is no exploit available.
WordPress
Vulnerability
CVE-2026-15090
VulDB
Apply vendor security patch