The Link Library WordPress plugin allows a failing safe request during reciprocal‑link validation to fall back to an unprotected fetch without validating the destination URL. This flaw permits any unauthenticated visitor to submit a URL that causes the site to issue HTTP requests to arbitrary internal hosts, returning the response to the attacker and enabling discovery of internal services or sensitive data.

WordPress plugin Link Library versions 7.8.8 through 7.9.5 are vulnerable. These releases lack the necessary destination URL validation during reciprocal‑link validation. Versions prior to 7.8.8 were addressed by CVE‑2025‑68600; upgrading to 7.9.6 or later applies the required fix.

The CVSS score is 4.0 and the EPSS score indicates a probability of exploitation less than 1%. The vulnerability is not listed in the CISA KEV catalog. Exploitation requires that the site owner has enabled the public link submission form with reciprocal‑link validation. If that form is available, an unauthenticated user can submit a crafted link that triggers an internal request, and the response is exposed to the attacker.