Lucene search
K

8 matches found

RedhatCVE
RedhatCVE
added 2025/05/22 10:19 p.m.5 views

CVE-2022-1826

The Cross-Linker WordPress plugin through 3.0.1.9 does not have CSRF check in place when creating Cross-Links, which could allow attackers to make a logged in admin perform such action via a CSRF attack...

6.5CVSS6.8AI score0.00103EPSS
Exploits1References1
CNVD
CNVD
added 2022/06/22 12:0 a.m.26 views

WordPress Cross-Linker plugin cross-site request forgery vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a set of blogging platforms developed using the PHP language. The WordPress plugin is an application plugin. versions of the WordPress Cross-Linker plugin prior to 3.0.1.9 are vulnerable to cross-site reque...

6.5CVSS2.2AI score0.00103EPSS
Exploits1References1
OSV
OSV
added 2022/06/20 11:15 a.m.1 views

CVE-2022-1826

The Cross-Linker WordPress plugin through 3.0.1.9 does not have CSRF check in place when creating Cross-Links, which could allow attackers to make a logged in admin perform such action via a CSRF attack...

6.5CVSS5.8AI score0.00103EPSS
Exploits1References1
NVD
NVD
added 2022/06/20 11:15 a.m.5 views

CVE-2022-1826

The Cross-Linker WordPress plugin through 3.0.1.9 does not have CSRF check in place when creating Cross-Links, which could allow attackers to make a logged in admin perform such action via a CSRF attack...

6.5CVSS0.00103EPSS
Exploits1References1
Prion
Prion
added 2022/06/20 11:15 a.m.21 views

Cross site request forgery (csrf)

The Cross-Linker WordPress plugin through 3.0.1.9 does not have CSRF check in place when creating Cross-Links, which could allow attackers to make a logged in admin perform such action via a CSRF attack...

4.3CVSS6.4AI score0.00103EPSS
Exploits1References1Affected Software1
CVE
CVE
added 2022/06/20 10:26 a.m.61 views

CVE-2022-1826

The CVE-2022-1826 entry concerns the WordPress Cross-Linker plugin (versions up to 3.0.1.9). The vulnerability is a missing CSRF check when creating Cross-Links, which could allow an attacker to induce a logged-in administrator to perform arbitrary link creation via a CSRF attack. Root cause: abs...

6.5CVSS6.3AI score0.00103EPSS
Exploits1References1Affected Software1
Cvelist
Cvelist
added 2022/06/20 10:26 a.m.10 views

CVE-2022-1826 Cross-Linker <= 3.0.1.9 - Arbitrary Cross-Link Creation via CSRF

The Cross-Linker WordPress plugin through 3.0.1.9 does not have CSRF check in place when creating Cross-Links, which could allow attackers to make a logged in admin perform such action via a CSRF attack...

6.6AI score0.00103EPSS
Exploits1References1
CNNVD
CNNVD
added 2022/06/20 12:0 a.m.1 views

WordPress plugin Cross-Linker 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a set of blogging platforms developed using the PHP language. The WordPress plugin is an application plugin. versions of the WordPress Cross-Linker plugin prior to 3.0.1.9 are vulnerable to cross-site reque...

6.5CVSS5.6AI score0.00103EPSS
Exploits1References2
Rows per page
Query Builder