{"vulnerability": "CVE-2026-18855", "sightings": [{"uuid": "58765855-e74c-44ea-9d70-920e1c769c6c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18855", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mt5fdjdx7v2y", "content": "CVE-2026-18855 - link library\nA security issue in WordPress's Link Library plugin allows attackers to delete files on the server without needing a password. This could lead to sensitive information\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#linklibrary #jackdewey #CVE #infosec", "creation_timestamp": "2026-08-15T19:20:04.545773Z"}, {"uuid": "8d515d7e-6eb5-4bd1-b7f3-a963706c2842", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18855", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mt5hkvmn2y27", "content": "\ud83d\udd34 CVE-2026-18855 - Critical (9.1)\n\nThe Link Library plugin for WordPress is vulnerable to arbitrary file deletion due to insufficien...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-18855/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-15T20:00:00.473847Z"}, {"uuid": "cfcb1e0f-4729-4554-88a3-9b66d9603297", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18855", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mt5mjam45d2z", "content": "WordPress\u30d7\u30e9\u30b0\u30a4\u30f3\u300cThe Link Library\u300dv7.9.4\u4ee5\u524d\u306e\u30d0\u30fc\u30b8\u30e7\u30f3\u3067\u3001\u8a8d\u8a3c\u3055\u308c\u3066\u3044\u306a\u3044\u653b\u6483\u8005\u304c\u4efb\u610f\u306e\u30d5\u30a1\u30a4\u30eb\u3092\u524a\u9664\u3057\u3001\u30ea\u30e2\u30fc\u30c8\u30b3\u30fc\u30c9\u5b9f\u884c\u306e\u53ef\u80fd\u6027\u304c\u3042\u308b\u3002\u7ba1\u7406\u8005\u304c\u7279\u5b9a\u8a2d\u5b9a\u3092\u6709\u2026\nCVE-2026-18855 CVSS 9.1 | CRITICAL", "creation_timestamp": "2026-08-15T21:28:33.341235Z"}, {"uuid": "518dd347-58b8-41ce-bb54-add32dcee14f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18855", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117102059957824509", "content": "CVE-2026-18855 - Critical RCE in WordPress Link Library plugin. Unauthenticated arbitrary file deletion via ll_delete_link_fields. CVSS 9.1. Patch under review. Update immediately. #CVE #WordPress #infosec\nhttps://www.valtersit.com/cve/CVE-2026-18855/", "creation_timestamp": "2026-08-15T23:13:52.624077Z"}, {"uuid": "67267b21-e504-49cb-b54f-0c20f3f3d9e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18855", "type": "seen", "source": "https://bsky.app/profile/termsofsurrender.bsky.social/post/3mt5yrqb7ni2h", "content": "WordPress Bleeds Out Again While Prague Files It Under Later\nPANIC 84% | Lag 0.0h | CVE-2026-18855 is a critical unauthenticated remote code execution issue in the WordPress Link Libra\n#AfterShockIndex\nREAD MORE", "creation_timestamp": "2026-08-16T01:08:02.373232Z"}, {"uuid": "039dda51-3af7-4907-9ae4-764403a451db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18855", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mt67wowvov24", "content": "CVE-2026-18855 link-library (CVSS Score 9.1) \n\n#WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #hacking #wpsecurity #atomicedge #cybersecurity #malware #vulnerabilityresearch #cve #redteam #proofofconcept", "creation_timestamp": "2026-08-16T03:16:05.562303Z"}]}