CVE-2023-7229

The illi Link Party! WordPress plugin through 1.0 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack.

Score

CVSS 3.1 5.5 Medium

Status

Analyzed - contact@wpscan.com

Published

2025-05-15

Last modified

2025-05-16

Weaknesses

CWE-352

Affected products

• Illi Link Party! (Evanliewer)
• Illi Link Party (Unknown)

References

• https://wpscan.com/vulnerability/d16f6ba0-a47d-413f-a6d4-058910441009/