Lucene search
+L

10 matches found

RedhatCVE
RedhatCVE
•added 2025/05/22 10:19 p.m.•18 views

CVE-2022-1826

The Cross-Linker WordPress plugin through 3.0.1.9 does not have CSRF check in place when creating Cross-Links, which could allow attackers to make a logged in admin perform such action via a CSRF attack...

6.5CVSS6.8AI score0.00534EPSS
SaveExploits1References1
CNVD
CNVD
•added 2022/06/22 12:00 a.m.•59 views

WordPress Cross-Linker plugin cross-site request forgery vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a set of blogging platforms developed using the PHP language. The WordPress plugin is an application plugin. versions of the WordPress Cross-Linker plugin prior to 3.0.1.9 are vulnerable to cross-site reque...

6.5CVSS2.2AI score0.00534EPSS
SaveExploits1References1
OSV
OSV
•added 2022/06/20 11:15 a.m.•19 views

CVE-2022-1826

The Cross-Linker WordPress plugin through 3.0.1.9 does not have CSRF check in place when creating Cross-Links, which could allow attackers to make a logged in admin perform such action via a CSRF attack...

6.5CVSS5.8AI score0.00534EPSS
SaveExploits1References1
NVD
NVD
•added 2022/06/20 11:15 a.m.•25 views

CVE-2022-1826

The Cross-Linker WordPress plugin through 3.0.1.9 does not have CSRF check in place when creating Cross-Links, which could allow attackers to make a logged in admin perform such action via a CSRF attack...

6.5CVSS0.00534EPSS
SaveExploits1References1
Prion
Prion
•added 2022/06/20 11:15 a.m.•35 views

Cross site request forgery (csrf)

The Cross-Linker WordPress plugin through 3.0.1.9 does not have CSRF check in place when creating Cross-Links, which could allow attackers to make a logged in admin perform such action via a CSRF attack...

4.3CVSS6.4AI score0.00534EPSS
SaveExploits1References1Affected Software1
CVE
CVE
•added 2022/06/20 10:26 a.m.•87 views

CVE-2022-1826

The CVE-2022-1826 entry concerns the WordPress Cross-Linker plugin (versions up to 3.0.1.9). The vulnerability is a missing CSRF check when creating Cross-Links, which could allow an attacker to induce a logged-in administrator to perform arbitrary link creation via a CSRF attack. Root cause: abs...

6.5CVSS6.3AI score0.00534EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
•added 2022/06/20 10:26 a.m.•42 views

CVE-2022-1826 Cross-Linker <= 3.0.1.9 - Arbitrary Cross-Link Creation via CSRF

The Cross-Linker WordPress plugin through 3.0.1.9 does not have CSRF check in place when creating Cross-Links, which could allow attackers to make a logged in admin perform such action via a CSRF attack...

6.6AI score0.00534EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2022/06/20 12:00 a.m.•17 views

WordPress plugin Cross-Linker 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a set of blogging platforms developed using the PHP language. The WordPress plugin is an application plugin. versions of the WordPress Cross-Linker plugin prior to 3.0.1.9 are vulnerable to cross-site reque...

6.5CVSS5.6AI score0.00534EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/06/20 12:00 a.m.•7 views

CVE-2022-1826: Cross-Site Request Forgery (CSRF)

The Cross-Linker WordPress plugin through 3.0.1.9 does not have CSRF check in place when creating Cross-Links, which could allow attackers to make a logged in admin perform such action via a CSRF attack...

6.5CVSS6.6AI score0.00534EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2022/06/20 12:00 a.m.•4 views

PT-2022-14145

Name of the Vulnerable Software and Affected Versions Cross-Linker WordPress plugin versions through 3.0.1.9 Description The issue concerns the lack of a CSRF check when creating Cross-Links, potentially allowing attackers to perform actions on behalf of a logged-in admin via a CSRF attack...

6.5CVSS0.00534EPSS
SaveExploits1References3
Rows per page
Query Builder