exploitDog

CVE-2022-1826

Опубликовано: 20 июн. 2022

Источник: nvd

CVSS3: 6.5

CVSS2: 4.3

EPSS Низкий

Описание

The Cross-Linker WordPress plugin through 3.0.1.9 does not have CSRF check in place when creating Cross-Links, which could allow attackers to make a logged in admin perform such action via a CSRF attack

Ссылки

https://wpscan.com/vulnerability/b9dba241-d94c-4ce5-8730-445ba8005e66
Exploit
Third Party Advisory
https://wpscan.com/vulnerability/b9dba241-d94c-4ce5-8730-445ba8005e66
Exploit
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:cross-linker_project:cross-linker:*:*:*:*:*:wordpress:*:*

Версия до 3.0.1.9 (включая)

EPSS

Процентиль: 29%

0.00103

Низкий

6.5 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-352

Связанные уязвимости

GHSA-6hcf-hc4g-6xwc

CVSS3: 6.5

github

больше 3 лет назад

The Cross-Linker WordPress plugin through 3.0.1.9 does not have CSRF check in place when creating Cross-Links, which could allow attackers to make a logged in admin perform such action via a CSRF attack

EPSS

Процентиль: 29%

0.00103

Низкий

6.5 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-352