Skip to content
OpenAdvisories

Vendor

vittor1o

2 known vulnerabilities.

Products

Linkz.ai – Automatic link previews on hover 2
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.5
    CVE-2024-9586

    Linkz.ai <= 1.1.8 - Missing Authorization to Unauthenticated Plugin Settings Update

    The Linkz.ai plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'check_auth' and 'check_logout' functions in versions up to, and including, 1.1.8. This makes it possible for unauthenticated attacke…

    vittor1o Linkz.ai – Automatic link previews on hover Web / CMS
  • Medium 5.4
    CVE-2024-9587

    Linkz.ai <= 1.1.8 - Missing Authorization to Authenticated (Subscriber+) Plugin Settings Update via AJAX

    The Linkz.ai plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'ajax_linkz' function in versions up to, and including, 1.1.8. This makes it possible for authenticated attackers with contributor-le…

    vittor1o Linkz.ai – Automatic link previews on hover Web / CMS