cleantalk
Vulnerabilities and Security Researches

Link Library, CVE-2021-25092

CVE, Research URL

CVE-2021-25092

Application

Link Library

Published on
Feb 01, 2022
Research Description
The Link Library WordPress plugin before 7.2.8 does not have CSRF check when resetting library settings, allowing attackers to make a logged in admin reset arbitrary settings via a CSRF attack
Affected versions
Min -, max 7.2.9.
Status
vulnerable