{
 "id": "WPSEC-2026-2352",
 "url": "https://wpsec.com/vuln/WPSEC-2026-2352/",
 "json_url": "https://wpsec.com/vuln/WPSEC-2026-2352/advisory.json",
 "markdown_url": "https://wpsec.com/vuln/WPSEC-2026-2352/index.md",
 "title": "Link Library <= 7.10.0 - Unauthenticated Sensitive Information Exposure via RSS Preview",
 "description": "The Link Library plugin for WordPress is vulnerable to Sensitive Information Exposure via the RSS preview feature in all versions up to, and including, 7.10.0 due to the preview handler accepting any supplied post ID without checking that it is a published link library entry. This makes it possible for unauthenticated attackers to view the title, RSS feed URL and site URL of unpublished links that have an RSS feed set, such as pending or draft submissions.",
 "plugin": {
  "slug": "link-library",
  "name": "Link Library",
  "full_name": "Link Library",
  "wordpress_org": "https://wordpress.org/plugins/link-library/",
  "advisories_url": "https://wpsec.com/vuln/plugin/link-library/",
  "attacksurface": "https://attacksurface.wpsec.com/plugin/link-library"
 },
 "type": "SENSITIVE DATA DISCLOSURE",
 "cwe": [
  "CWE-200"
 ],
 "cve": [],
 "cvss": {
  "version": "3.1",
  "score": 5.3,
  "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
  "severity": "Medium"
 },
 "affected": {
  "ranges": [
   {
    "from": null,
    "from_inclusive": true,
    "to": "7.10.1",
    "to_inclusive": false
   }
  ],
  "text": [
   "all versions before 7.10.1"
  ]
 },
 "introduced_in": null,
 "fixed_in": "7.10.1",
 "remediation": "Update to 7.10.1 or later.",
 "fix_released": "2026-11-01T16:00:32+00:00",
 "published": "2026-11-03T14:48:33+00:00",
 "updated": "2026-11-03T13:39:50.742328+00:00",
 "also_published_as": null,
 "references": [
  "https://wpsec.com/vuln/WPSEC-2026-2352/",
  "https://plugins.svn.wordpress.org/link-library/tags/7.10.1/",
  "https://wordpress.org/plugins/link-library/"
 ],
 "attacksurface_url": "https://attacksurface.wpsec.com/plugin/link-library",
 "source": "WPSec",
 "license": {
  "name": "CC BY 4.0",
  "url": "https://creativecommons.org/licenses/by/4.0/"
 },
 "usage": {
  "plugin": "Low",
  "affected_versions": "Low",
  "as_of": "2026-11-03"
 }
}