CVE-2026-0812

CVE-2026-0812 is a medium severity vulnerability affecting the affected product.

Description: The LinkedIn SC plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘linkedin_sc_date_format’, ‘linkedin_sc_api_key’, and ‘linkedin_sc_secret_key’ parameters in all versions up to, and including, 1.1.9 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level access and above, to inject arbitrary web scripts in pages that […]

Affected Versions:
❌ Vulnerable: ≤ 1.1.9
✅ Safe: ≥ 1.1.10

Exploit Difficulty: HARD
⏱️ Time to exploit: > 4 hours
🛠️ Required skills: Advanced security expertise
💰 Public exploits: Rare or not public

How to Fix:


- Check if you're running the affected product
- Verify version (vulnerable: ≤ 1.1.9)


- Update to ≥ 1.1.10 or later
- If patching is not immediately possible: restrict network exposure, apply least-privilege access


- Test the fix in a staging environment first
- Review logs for signs of exploitation
- Monitor for IOCs (Indicators of Compromise)


- Enable automatic security updates
- Set up vulnerability monitoring
- Review and harden security configurations