Vulnerabilities > CVE-2022-2172 - Unspecified vulnerability in Linkworth

047910
CVSS 4.3 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
NONE
Integrity impact
LOW
Availability impact
NONE
network
low complexity
linkworth
NVD
Published: 2022-08-22
Updated: 2024-11-21

Summary

The LinkWorth WordPress plugin before 3.3.4 does not implement nonce checks, which could allow attackers to make a logged in admin change settings via a CSRF attack.

Vulnerable Configurations

Part Description Count
Application
Linkworth
1

References