← Database

CVE-2022-1826

MEDIUM CVSS: 6.5 Published: 2022-06-20 Modified: 2026-06-17

Description

The Cross-Linker WordPress plugin through 3.0.1.9 does not have CSRF check in place when creating Cross-Links, which could allow attackers to make a logged in admin perform such action via a CSRF attack

Affected Platforms

Cross-Linker Project Cross-Linker

Weakness Type

CWE-352

References