CVE-2021-25093: Link Library < 7.2.8 - Unauthenticated Arbitrary Links Deletion
Published Feb 1, 2022
·Updated
The Link Library WordPress plugin before 7.2.8 does not have authorisation in place when deleting links, allowing unauthenticated users to delete arbitrary links via a crafted request
Affected Software
2 affected components
Ylefebvre Link Library Wordpress<7.2.8
Link Library Project Link Library Wordpress<7.2.8
Event History
Feb 1, 2022
CVE Published
via MITRE·12:21 PM
Data Sourced
via MITRE·12:21 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2021-25093?
CVE-2021-25093 is classified as a high severity vulnerability due to its potential for allowing unauthorized deletion of links.
2
How do I fix CVE-2021-25093?
To fix CVE-2021-25093, update the Link Library WordPress plugin to version 7.2.8 or later.
3
Who is affected by CVE-2021-25093?
Any WordPress site using the Link Library plugin versions prior to 7.2.8 is affected by CVE-2021-25093.
4
What is the impact of CVE-2021-25093?
The impact of CVE-2021-25093 allows unauthenticated users to delete arbitrary links, potentially disrupting website operations.
5
Is user authentication required for CVE-2021-25093 attacks?
No, CVE-2021-25093 does not require user authentication for exploitation, making it particularly dangerous.