Veille CVE

Août 2026

3 CVE

Critique 1 Élevée 1 Moyenne 1 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « Unknown Link Library » ✕
  1. CVE-2026-16535 6.1 Moyenne

    Unknown Link Library

    The Link Library WordPress plugin before 7.9.4 does not sanitise and escape a parameter before reflecting it back in a response, allowing unauthenticated attackers to perform Reflected Cross-Site Scripting attacks against users who can be tricked into performing an action.

  2. CVE-2026-16532 9.1 Critique

    Unknown Link Library

    The Link Library WordPress plugin before 7.9.3 does not properly sanitise and escape a user-supplied value before using it in a SQL query, allowing unauthenticated users to perform SQL injection attacks.

  3. CVE-2026-16285 7.5 Élevée

    Unknown Product Attachment for WooCommerce

    The Product Attachment for WooCommerce WordPress plugin before 2.3.3 does not perform any authorization check before streaming media library files, allowing unauthenticated users to download any attachment — including private or unlinked uploads — by enumerating its numeric ID.