High · 7.1 CVE-2024-22287 EUVD-2024-19848GHSA-5mwr-c944-45q4

WordPress Better Anchor Links Plugin <= 1.7.5 is vulnerable to Cross Site Request Forgery (CSRF)

Published Jan 31, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: Luděk Melichar Product: Better Anchor Links

Description

Cross-Site Request Forgery (CSRF) vulnerability in Luděk Melichar Better Anchor Links allows Cross-Site Scripting (XSS).This issue affects Better Anchor Links: from n/a through 1.7.5.

Affected products

Vendor	Product	Affected	Fixed
Luděk Melichar	Better Anchor Links	≤ 1.7.5	—

References

https://patchstack.com/database/vulnerability/better-anchor-links/wordpress-better-anchor-links-plugin-1-7-5-csrf-to-xss-vulnerability?_s_id=cve vdb-entry