LinkWorth Plugin < 3.3.4 - Arbitrary Setting Update via CSRF
3Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackepss 0.4%
exploitation probability
0.4%top 68% of all CVEs
observed exploitation
nono source reports it
The LinkWorth WordPress plugin before 3.3.4 does not implement nonce checks, which could allow attackers to make a logged in admin change settings via a CSRF attack.
Affected products
Unknown · LinkWorth Plugin