CVE-2022-2172CWE-352

LinkWorth Plugin < 3.3.4 - Arbitrary Setting Update via CSRF

published August 22, 2022

CVSS
—
EPSS
0%
Percentile
31.9
In the wild
Unconfirmed
What it is

The LinkWorth WordPress plugin before 3.3.4 does not implement nonce checks, which could allow attackers to make a logged in admin change settings via a CSRF attack.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00390 · 31.9th percentile
Weakness
CWE-352 · Cross-Site Request Forgery (CSRF)
Published
2022-08-22T14:59Z
EPSS history
Timeline
  • 22 AUG 14:59Z
    LinkWorth Plugin < 3.3.4 - Arbitrary Setting Update via CSRF
    cvelistv5