Security Advisory
CVE-2024-9586
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
The Linkz.ai plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the check_auth and check_logout functions in versions up to, and including, 1.1.8. This makes it possible for unauthenticated attackers to update plugin settings.