The Link Library WordPress plugin before 7.2.8 does not have authorisation in place when deleting links, allowing unauthenticated users to delete arbitrary links via a crafted request
References
Link | Resource |
---|---|
https://wpscan.com/vulnerability/7a7603ce-d76d-4c49-a886-67653bed8cd3 | Exploit Third Party Advisory |
Configurations
Information
Published : 2022-02-01 05:15
Updated : 2022-02-04 09:57
NVD link : CVE-2021-25093
Mitre link : CVE-2021-25093
JSON object : View
CWE
CWE-862
Missing Authorization
Products Affected
link_library_project
- link_library