CVE-2021-25092

Name of the Vulnerable Software and Affected Versions Link Library WordPress plugin versions prior to 7.2.8

Description The issue allows attackers to make a logged-in admin reset arbitrary settings via a CSRF attack because the Link Library WordPress plugin does not have a CSRF check when resetting library settings.

Recommendations For versions prior to 7.2.8, update to version 7.2.8 or later to resolve the issue. As a temporary workaround, consider restricting access to the library settings reset functionality to minimize the risk of exploitation.