What is CVE-2026-15413?

CVE-2026-15413 is a critical-severity vulnerability in Link Factory, classified under Hidden Functionality. CVSS score: 10.0/10. Published 2026-08-13.

How severe is CVE-2026-15413?

Critical severity. CVSS v3 base score is 10.0 out of 10.

Vulnerability in Link Factory

CVE-2026-15413

The Link Factory WordPress plugin is a backdoor. Distributed as a "homepage sentence publisher", it exposes an operator-controlled REST API under /wp-json/link-factory/v1/ - authenticated by a detached Ed25519 signature verified against a…

CVSS v3 metric

CVSS v3 base score 10.0 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H.

Affected products

Unknown Link Factory — versions 0

Weakness classification (CWE)

CWE-912 — Hidden Functionality

References

contact@wpscan.com (technical-description, exploit, vdb-entry)

Frequently asked questions

What is CVE-2026-15413?: CVE-2026-15413 is a critical-severity vulnerability in Link Factory, classified under Hidden Functionality. CVSS score: 10.0/10. Published 2026-08-13.
How severe is CVE-2026-15413?: Critical severity. CVSS v3 base score is 10.0 out of 10.