{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-0812", "assignerOrgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "state": "PUBLISHED", "assignerShortName": "Wordfence", "dateReserved": "2026-01-09T15:29:04.501Z", "datePublished": "2026-01-14T06:40:05.145Z", "dateUpdated": "2026-04-08T16:39:42.230Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "shortName": "Wordfence", "dateUpdated": "2026-04-08T16:39:42.230Z"}, "affected": [{"vendor": "guillaumev", "product": "LinkedIn SC", "versions": [{"version": "0", "status": "affected", "lessThanOrEqual": "1.1.9", "versionType": "semver"}], "defaultStatus": "unaffected"}], "descriptions": [{"lang": "en", "value": "The LinkedIn SC plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'linkedin_sc_date_format', 'linkedin_sc_api_key', and 'linkedin_sc_secret_key' parameters in all versions up to, and including, 1.1.9 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses the injected page."}], "title": "LinkedIn SC <= 1.1.9 - Authenticated (Administrator+) Stored Cross-Site Scripting via Settings Page", "references": [{"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/1c4fd888-aeaf-4451-a151-8f884bc22f0b?source=cve"}, {"url": "https://plugins.trac.wordpress.org/browser/linkedin-sc/tags/1.1.9/linkedin-sc.php#L164"}, {"url": "https://plugins.trac.wordpress.org/browser/linkedin-sc/trunk/linkedin-sc.php#L164"}], "problemTypes": [{"descriptions": [{"lang": "en", "description": "CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')", "cweId": "CWE-79", "type": "CWE"}]}], "metrics": [{"cvssV3_1": {"version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N", "baseScore": 4.4, "baseSeverity": "MEDIUM"}}], "credits": [{"lang": "en", "type": "finder", "value": "Bhumividh Treloges"}], "timeline": [{"time": "2026-01-13T17:32:02.000Z", "lang": "en", "value": "Disclosed"}]}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-01-14T21:38:08.371548Z", "id": "CVE-2026-0812", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-01-14T21:47:06.478Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-0812", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-01-14T21:38:08.371548Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-01-14T21:41:21.734Z"}}], "cna": {"title": "LinkedIn SC <= 1.1.9 - Authenticated (Administrator+) Stored Cross-Site Scripting via Settings Page", "credits": [{"lang": "en", "type": "finder", "value": "Bhumividh Treloges"}], "metrics": [{"cvssV3_1": {"version": "3.1", "baseScore": 4.4, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N"}}], "affected": [{"vendor": "guillaumev", "product": "LinkedIn SC", "versions": [{"status": "affected", "version": "*", "versionType": "semver", "lessThanOrEqual": "1.1.9"}], "defaultStatus": "unaffected"}], "timeline": [{"lang": "en", "time": "2026-01-13T17:32:02.000Z", "value": "Disclosed"}], "references": [{"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/1c4fd888-aeaf-4451-a151-8f884bc22f0b?source=cve"}, {"url": "https://plugins.trac.wordpress.org/browser/linkedin-sc/tags/1.1.9/linkedin-sc.php#L164"}, {"url": "https://plugins.trac.wordpress.org/browser/linkedin-sc/trunk/linkedin-sc.php#L164"}], "descriptions": [{"lang": "en", "value": "The LinkedIn SC plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'linkedin_sc_date_format', 'linkedin_sc_api_key', and 'linkedin_sc_secret_key' parameters in all versions up to, and including, 1.1.9 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses the injected page."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-79", "description": "CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')"}]}], "providerMetadata": {"orgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "shortName": "Wordfence", "dateUpdated": "2026-01-14T06:40:05.145Z"}}}, "cveMetadata": {"cveId": "CVE-2026-0812", "state": "PUBLISHED", "dateUpdated": "2026-01-14T21:47:06.478Z", "dateReserved": "2026-01-09T15:29:04.501Z", "assignerOrgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "datePublished": "2026-01-14T06:40:05.145Z", "assignerShortName": "Wordfence"}, "dataVersion": "5.2"}

{"cveTags": [], "descriptions": [{"lang": "en", "value": "The LinkedIn SC plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'linkedin_sc_date_format', 'linkedin_sc_api_key', and 'linkedin_sc_secret_key' parameters in all versions up to, and including, 1.1.9 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses the injected page."}, {"lang": "es", "value": "El plugin LinkedIn SC para WordPress es vulnerable a cross-site scripting almacenado a trav\u00e9s de los par\u00e1metros 'linkedin_sc_date_format', 'linkedin_sc_api_key' y 'linkedin_sc_secret_key' en todas las versiones hasta la 1.1.9, inclusive, debido a una sanitizaci\u00f3n de entrada y un escape de salida insuficientes. Esto permite a atacantes autenticados, con acceso de nivel de administrador y superior, inyectar scripts web arbitrarios en p\u00e1ginas que se ejecutar\u00e1n cada vez que un usuario acceda a la p\u00e1gina inyectada."}], "id": "CVE-2026-0812", "lastModified": "2026-04-15T00:35:42.020", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 4.4, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "HIGH", "scope": "CHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N", "version": "3.1"}, "exploitabilityScore": 1.3, "impactScore": 2.7, "source": "security@wordfence.com", "type": "Secondary"}]}, "published": "2026-01-14T07:16:15.843", "references": [{"source": "security@wordfence.com", "url": "https://plugins.trac.wordpress.org/browser/linkedin-sc/tags/1.1.9/linkedin-sc.php#L164"}, {"source": "security@wordfence.com", "url": "https://plugins.trac.wordpress.org/browser/linkedin-sc/trunk/linkedin-sc.php#L164"}, {"source": "security@wordfence.com", "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/1c4fd888-aeaf-4451-a151-8f884bc22f0b?source=cve"}], "sourceIdentifier": "security@wordfence.com", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-79"}], "source": "security@wordfence.com", "type": "Secondary"}]}

{}

{"analysis": {"en": {"generated_at": "2026-04-16T18:08:07.969527+00:00", "value": {"mitigation_remediation": ["Upgrade the LinkedIn\u202fSC plugin to the latest version that removes the vulnerability.", "If an upgrade is not immediately possible, sanitize and escape the values of 'linkedin_sc_date_format', 'linkedin_sc_api_key', and 'linkedin_sc_secret_key' before they are stored in the database to prevent executable script persistence.", "Limit access to the plugin settings page to the minimum number of trusted administrators and audit any changes to verify that only legitimate configuration updates are made."], "summary": {"action": "Patch", "impact": "Stored cross\u2011site scripting via plugin settings"}, "threat_synthesis": {"affected_systems": "All installations of the LinkedIn\u202fSC plugin distributed by guillaumev that use a version up to and including 1.1.9 are affected. WordPress sites running these versions and using the settings page are at risk.", "description_and_impact": "The LinkedIn\u202fSC plugin for WordPress is vulnerable to a stored cross\u2011site scripting flaw that permits the \u2018linkedin_sc_date_format\u2019, \u2018linkedin_sc_api_key\u2019, and \u2018linkedin_sc_secret_key\u2019 inputs to contain arbitrary JavaScript. The lack of input sanitization and output escaping means that any script injected in these fields is stored in the database and later rendered on the settings page, causing it to execute whenever a user accesses that page.", "risk_and_exploitability": "The CVSS score of 4.4 indicates a moderate severity, while the EPSS score of less than 1\u202f% suggests a low likelihood of public exploitation. The vulnerability is not listed in the CISA KEV catalog. An attacker must first possess administrator\u2011level or higher privileges, then edit the plugin settings to add malicious code. Once stored, the payload runs on subsequent page views by any user who accesses the affected page, making containment difficult without a patch or input sanitization."}}}}, "created": "2026-01-15T08:04:01.274873+00:00", "updated": "2026-04-16T18:15:43.297503+00:00", "vendors": ["guillaumev", "guillaumev$PRODUCT$linkedin_sc", "wordpress", "wordpress$PRODUCT$wordpress"]}