CVE-2022-1830

Name of the Vulnerable Software and Affected Versions Amazon Einzeltitellinks WordPress plugin versions 1.3.3 and earlier

Description The issue is related to the lack of a CSRF check when updating settings, which could allow attackers to make a logged-in admin change them via a CSRF attack. This lack of protection, combined with insufficient sanitization and escaping, can lead to Stored Cross-Site Scripting.

Recommendations For Amazon Einzeltitellinks WordPress plugin versions 1.3.3 and earlier, consider disabling the settings update functionality until a patch is available to prevent potential CSRF attacks. Restrict access to the plugin's settings to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.