Threat Entry Updated 2025-01-29

CVE-2024-9587 - Linkz Ai Plugin

The Linkz.ai plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'ajax_linkz' function in versions up to, and including, 1.1.8. This makes it possible for authenticated attackers with contributor-level privileges or above, to update plugin settings.

PLUGIN Linkz Ai

CVE-2024-9587

MEDIUM CVSS 5.4 2024-10-11

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2025-01-29

CVE-2024-9586 - Linkz Ai Plugin

The Linkz.ai plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'check_auth' and 'check_logout' functions in versions up to, and including, 1.1.8. This makes it possible for unauthenticated attackers to update plugin settings.

PLUGIN Linkz Ai

CVE-2024-9586

MEDIUM CVSS 6.5 2024-10-11

Risk Score

Open Full Technical Breakdown