CVE-2021-25093CWE-862

Link Library < 7.2.8 - Unauthenticated Arbitrary Links Deletion

published February 1, 2022

CVSS
—
EPSS
1%
Percentile
67.8
In the wild
Unconfirmed
What it is

The Link Library WordPress plugin before 7.2.8 does not have authorisation in place when deleting links, allowing unauthenticated users to delete arbitrary links via a crafted request

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01196 · 67.8th percentile
Weakness
CWE-862 · Missing Authorization
Published
2022-02-01T12:21Z
EPSS history
Timeline
  • 01 FEB 12:21Z
    Link Library < 7.2.8 - Unauthenticated Arbitrary Links Deletion
    cvelistv5