WordPress Link Library plugin cross-site request forgery vulnerability

WordPress is a set of blogging platforms developed by the WordPress Foundation using the PHP language. WordPress Link Library plugin in versions prior to 7.2.8 is vulnerable to cross-site request forgery, which stems from a WEB application that does not adequately verify that requests are coming...

Adobe Creative Cloud Desktop Application 代码问题漏洞

Adobe Creative Cloud Desktop Application is a suite of applications from Adobe for managing applications and services in the Creative Cloud Member Management Center. The application supports synchronizing and sharing files, managing fonts, and accessing a library of assets for commercial...

AMD Radeon 代码问题漏洞

Amd Radeon is a package of device drivers and utilities for Advanced Micro Devices graphics cards and gpu's from Amd USA. A security vulnerability exists in AMD Radeon Software that stems from the possibility that AMD Radeon Software could be hijacked by a DLL via a path variable. An unprivileged...

CVE-2021-25093

The Link Library WordPress plugin before 7.2.8 does not have authorisation in place when deleting links, allowing unauthenticated users to delete arbitrary links via a crafted request...

CVE-2021-25091

The Link Library WordPress plugin before 7.2.9 does not sanitise and escape the settingscopy parameter before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting...

CVE-2021-25092

The Link Library WordPress plugin before 7.2.8 does not have CSRF check when resetting library settings, allowing attackers to make a logged in admin reset arbitrary settings via a CSRF attack...

CVE-2021-25092

The Link Library WordPress plugin before 7.2.8 does not have CSRF check when resetting library settings, allowing attackers to make a logged in admin reset arbitrary settings via a CSRF attack...

CVE-2021-25092 Link Library < 7.2.8 - Library Settings Reset via CSRF

The Link Library WordPress plugin before 7.2.8 does not have CSRF check when resetting library settings, allowing attackers to make a logged in admin reset arbitrary settings via a CSRF attack...

CVE-2021-25093

The CVE concerns the WordPress Link Library plugin prior to version 7.2.8, where missing authorization for link deletion allows unauthenticated users to remove arbitrary links. The underlying issue is an authority check gap when performing delete requests, enabling exploitation without credential...

CVE-2021-25092

CVE-2021-25092 affects WordPress Link Library plugin versions prior to 7.2.8. The root cause is the absence of a CSRF check when resetting library settings, enabling a logged-in attacker to trigger a reset of arbitrary settings via CSRF. The practical impact is admin-level configuration changes w...

CVE-2021-25091

CVE-2021-25091 affects the WordPress Link Library plugin prior to 7.2.9. The vulnerability is a Reflected Cross-Site Scripting (XSS) caused by insufficient sanitisation/escaping of the settingscopy parameter before it is output on an admin page. Impact is reflected XSS as described in multiple so...

CVE-2021-25091 Link Library < 7.2.9 - Reflected Cross-Site Scripting

The Link Library WordPress plugin before 7.2.9 does not sanitise and escape the settingscopy parameter before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting...

PT-2022-9648 · WordPress · Link Library

Name of the Vulnerable Software and Affected Versions: Link Library WordPress plugin versions prior to 7.2.8 Description: The issue allows attackers to make a logged-in admin reset arbitrary settings via a CSRF attack because the Link Library WordPress plugin does not have a CSRF check when...

PT-2022-9649 · WordPress · Link Library

Name of the Vulnerable Software and Affected Versions: Link Library WordPress plugin versions prior to 7.2.8 Description: The issue allows unauthenticated users to delete arbitrary links via a crafted request due to the lack of authorization in place when deleting links. Recommendations: For...

WordPress plugin 跨站脚本漏洞

WordPress is the WordPress Foundation's suite of blogging platforms developed using the PHP language. A cross-site scripting vulnerability exists in versions of the WordPress Link Library plugin prior to 7.2.9, which stems from the plugin's failure to clean and escape settingscopy parameters befo...

WordPress plugin 跨站请求伪造漏洞

WordPress is a set of blogging platforms developed by the WordPress Foundation using the PHP language. WordPress Link Library plugin in versions prior to 7.2.8 is vulnerable to cross-site request forgery, which stems from a WEB application that does not adequately verify that requests are coming...

WordPress 安全漏洞

WordPress plugin is a WordPress application plugin. WordPress Link Library plugin versions prior to 7.2.8 have an arbitrary link removal vulnerability, which stems from unauthorized removal of links, and can be exploited by attackers to remove arbitrary links via carefully crafted requests...

PT-2022-9647 · WordPress · Link Library

Name of the Vulnerable Software and Affected Versions: Link Library WordPress plugin versions prior to 7.2.9 Description: The issue is related to a Reflected Cross-Site Scripting problem. It occurs because the settingscopy parameter is not properly sanitised and escaped before being outputted bac...

CVE-2021-27971

Alps Alpine Touchpad Driver 10.3201.101.215 is vulnerable to DLL Injection...

CVE-2021-44463

Missing DLLs, if replaced by an insider, could allow an attacker to achieve local privilege escalation on the DeltaV Distributed Control System Controllers and Workstations All versions when some DeltaV services are started...