Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Link Library 7.2.8 Clear all filters
TI-2021-07371 CVE-2021-25093 · GHSA-4j83-364h-wcgq

Link Library < 7.2.8 - Unauthenticated Arbitrary Links Deletion

Priority LOW 35

The Link Library WordPress plugin before 7.2.8 does not have authorisation in place when deleting links, allowing unauthenticated users to delete arbitrary links via a crafted request

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01196 Published 2022-02-01 Fixed in 7.2.8 CWE-862
TI-2021-07370 CVE-2021-25092 · GHSA-79qc-m83g-g4j5

Link Library < 7.2.8 - Library Settings Reset via CSRF

Priority LOW 29

The Link Library WordPress plugin before 7.2.8 does not have CSRF check when resetting library settings, allowing attackers to make a logged in admin reset arbitrary settings via a CSRF attack

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.0048 Published 2022-02-01 Fixed in 7.2.8 CWE-352