CVE-2021-25092

The Link Library WordPress plugin before 7.2.8 does not have CSRF check when resetting library settings, allowing attackers to make a logged in admin reset arbitrary settings via a CSRF attack...

CVE-2021-25092

creationtimestamp| type| source ---|---|--- 2022-02-01 16:26:33+00:00| seen| https://t.me/cibsecurity/36632...

CVE-2021-25092

CVE-2021-25092 affects WordPress Link Library plugin versions prior to 7.2.8. The root cause is the absence of a CSRF check when resetting library settings, enabling a logged-in attacker to trigger a reset of arbitrary settings via CSRF. The practical impact is admin-level configuration changes w...

CVE-2021-25092 Link Library < 7.2.8 - Library Settings Reset via CSRF

The Link Library WordPress plugin before 7.2.8 does not have CSRF check when resetting library settings, allowing attackers to make a logged in admin reset arbitrary settings via a CSRF attack...