Lucene search

K
patchstackDaniel RufPATCHSTACK:8D2E7D0718784C37B77A69695BCB4764
HistoryMay 17, 2022 - 12:00 a.m.

WordPress Hot Linked Image Cacher plugin <= 1.16 - Image upload/cache abuse via Cross-Site Request Forgery (CSRF) vulnerability

2022-05-1700:00:00
Daniel Ruf
patchstack.com
2

0.001 Low

EPSS

Percentile

43.4%

Image upload/cache abuse via Cross-Site Request Forgery (CSRF) vulnerability discovered by Daniel Ruf in WordPress Hot Linked Image Cacher plugin (versions <= 1.16).

Solution

Deactivate and delete. This plugin has been closed as of May 16, 2022 and is not available for download. This closure is temporary, pending a full review.

CPENameOperatorVersion
hot linked image cacherle1.16

0.001 Low

EPSS

Percentile

43.4%

Related for PATCHSTACK:8D2E7D0718784C37B77A69695BCB4764