CVE-2022-2172: vulnerability in LinkWorth Plugin
LinkWorth Plugin < 3.3.4 - Arbitrary Setting Update via CSRF
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
3Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackepss 0.4%
The LinkWorth WordPress plugin before 3.3.4 does not implement nonce checks, which could allow attackers to make a logged in admin change settings via a CSRF attack.
Affected products
Unknown · LinkWorth Plugin