Product
An unauthenticated arbitrary file deletion vulnerability in the Link Library WordPress plugin (CVE-2026-18855) allows attackers to trigger server-side file removal via manipulated input during standard administrative moderation.