CVE-2021-25093 Link Library < 7.2.8 - Unauthenticated Arbitrary Links Deletion

2022-02-0112:21:39

CWE-862

WPScan

www.cve.org

wordpress plugin vulnerability crafted request

EPSS

0.001

Percentile

50.3%

JSON

The Link Library WordPress plugin before 7.2.8 does not have authorisation in place when deleting links, allowing unauthenticated users to delete arbitrary links via a crafted request

CNA Affected

[
  {
    "product": "Link Library",
    "vendor": "Unknown",
    "versions": [
      {
        "lessThan": "7.2.8",
        "status": "affected",
        "version": "7.2.8",
        "versionType": "custom"
      }
    ]
  }
]

References

wpscan.com/vulnerability/7a7603ce-d76d-4c49-a886-67653bed8cd3

EPSS

0.001

Percentile

50.3%

JSON

Related for CVELIST:CVE-2021-25093