https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 11:43:35 +0000 https://vulnerability.circl.lu/vuln/fkie_cve-2026-15413 <p>The Link Factory WordPress plugin is a backdoor. Distributed as a &#34;homepage sentence publisher&#34;, it exposes an operator-controlled REST API under /wp-json/link-factory/v1/ - authenticated by a detached Ed25519 signature verified against a hardcoded operator public key (except for the health check).</p> <p>The Link Factory WordPress plugin is a backdoor. Distributed as a &#34;homepage sentence publisher&#34;, it exposes an operator-controlled REST API under /wp-json/link-factory/v1/ - authenticated by a detached Ed25519 signature verified against a hardcoded operator public key (except for the health check).</p> https://vulnerability.circl.lu/vuln/fkie_cve-2026-15413 https://vulnerability.circl.lu/vuln/ghsa-p2hj-vx9x-4rh8 <p>The Link Factory WordPress plugin is a backdoor. Distributed as a &#34;homepage sentence publisher&#34;, it exposes an operator-controlled REST API under /wp-json/link-factory/v1/ - authenticated by a detached Ed25519 signature verified against a hardcoded operator public key (except for the health check).</p> <p>The Link Factory WordPress plugin is a backdoor. Distributed as a &#34;homepage sentence publisher&#34;, it exposes an operator-controlled REST API under /wp-json/link-factory/v1/ - authenticated by a detached Ed25519 signature verified against a hardcoded operator public key (except for the health check).</p> https://vulnerability.circl.lu/vuln/ghsa-p2hj-vx9x-4rh8