CVE-2026-15413
CriticalCVSS 10.0Summary
The Link Factory WordPress plugin is a backdoor. Distributed as a 'homepage sentence publisher', it exposes an operator-controlled REST API under /wp-json/link-factory/v1/ - authenticated by a detached Ed25519 signature verified against a hardcoded operator public key (except for the health check).
Risk Assessment
The risk includes full attacker control over the WordPress site, including the ability to perform arbitrary operations via the API, which could lead to site takeover and data compromise.
Recommendation
It is recommended to immediately remove the Link Factory plugin from the system and scan the site for other signs of compromise.
Original NVD description (English source)
The Link Factory WordPress plugin is a backdoor. Distributed as a "homepage sentence publisher", it exposes an operator-controlled REST API under /wp-json/link-factory/v1/ - authenticated by a detached Ed25519 signature verified against a hardcoded operator public key (except for the health check).