CVE-2024-9587

Name of the Vulnerable Software and Affected Versions Linkz.ai plugin for WordPress versions up to, and including, 1.1.8

Description The issue allows unauthorized modification of data due to a missing capability check on the ajax linkz function. This makes it possible for authenticated attackers with contributor-level privileges or above to update plugin settings.

Recommendations For versions up to, and including, 1.1.8, update to a version that includes a fix for the missing capability check on the ajax linkz function. As a temporary workaround, consider restricting access to the ajax linkz function to prevent unauthorized modification of data.