LinkWorth plugin <= 3.3.3 - Cross-Site Request Forgery to Plugin Setting Update
highThe LinkWorth plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 3.3.3. This is due to missing or incorrect nonce validation on the update_advanced_options_action action. This makes it possible for unauthenticated attackers to trigger plugin setting updates and deletion v...
- CVSS:
- 8.8
- Affected:
- up to 3.3.3
- Fixed in:
- 3.3.4
- Disclosed:
- Aug 1, 2022