Stored Cross-Site Scripting Vulnerability in LinkedIn SC Plugin for WordPress

CVE-2026-0812

What is CVE-2026-0812?

The LinkedIn SC plugin for WordPress contains a vulnerability that allows for stored cross-site scripting. This issue arises from inadequate input sanitization and output escaping in the parameters 'linkedin_sc_date_format', 'linkedin_sc_api_key', and 'linkedin_sc_secret_key'. Authenticated users with administrator-level access can exploit this vulnerability by injecting malicious web scripts into pages. These scripts are executed when users access the compromised pages, potentially leading to unauthorized actions or data exposure.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References