Internal Link Building <= 1.2.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
medium
The Internal Link Building plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 1.2.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and above, to i...
- CVSS:
- 4.4
- Affected:
- up to 1.2.3
- Fix:
- No patched version reported
- Disclosed:
- Oct 18, 2023
CVE-2023-46192 on NVD →
Internal Link Building <= 1.2.3 - Cross-Site Request Forgery
medium
The Internal Link Building plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.2.3. This is due to missing or incorrect nonce validation on an unknown function. This makes it possible for unauthenticated attackers to perform an unknown action granted they can trick a...
- CVSS:
- 4.3
- Affected:
- up to 1.2.3
- Fix:
- No patched version reported
- Disclosed:
- Oct 18, 2023
CVE-2023-46193 on NVD →
Protect your WordPress site
Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.
Scan your site free
← Back to the vulnerability database