CVE-2021-25093

The Link Library WordPress plugin before 7.2.8 does not have authorisation in place when deleting links, allowing unauthenticated users to delete arbitrary links via a crafted request...

CVE-2021-25093

The Link Library WordPress plugin before 7.2.8 does not have authorisation in place when deleting links, allowing unauthenticated users to delete arbitrary links via a crafted request...

CVE-2021-25093

The CVE concerns the WordPress Link Library plugin prior to version 7.2.8, where missing authorization for link deletion allows unauthenticated users to remove arbitrary links. The underlying issue is an authority check gap when performing delete requests, enabling exploitation without credential...