CyberSecBulletin

Link Factory vulnerabilities

We track 1 vulnerability in Link Factory products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on August 13, 2026.

1vulnerabilities
1critical
0high
0exploited
10.0average CVSS score

Latest Link Factory vulnerabilities

  • 10.0 Critical severity

    Link Factory: Hidden Functionality

    CVE-2026-15413Link Factory

    The Link Factory WordPress plugin is a backdoor. Distributed as a "homepage sentence publisher", it exposes an operator-controlled REST API under /wp-json/link-factory/v1/ - authenticated by a detached Ed25519 signature verified against a hardcoded operator pu