Threats tagged 'ghsa-p2hj-vx9x-4rh8'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Critical	10.0	EPSS 0.5%	CVE-2026-15413Link Factory (WordPress plugin) · Hidden Functionality Critical10.0EPSS 0.5%2026-08-13CVE Database V5CVE-2026-15413 The Link Factory WordPress plugin is a backdoor. Distributed as a "homepage sentence publisher", it exposes an operator-controlled REST API under /wp-json/link-factory/v1/ - authenticated by a detached Ed25519 signature verified against a hardcoded operator public key (except for the health check). EPSS 0.5%Vulnerability CWE-912 #ghsa-p2hj-vx9x-4rh8	CVE Database V5	2026-08-13

Page 1 of 1