PT-2025-21384 · WordPress · Illi Link Party!

·

CVE-2023-7229

·

Published

2025-05-15

·

Updated

2025-05-16

CVSS v3.1

5.5

Medium

VectorAV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L
Name of the Vulnerable Software and Affected Versions: The illi Link Party! WordPress plugin version 1.0
Description: The issue is related to the lack of a CSRF check when updating settings, which could allow attackers to make a logged-in admin change them via a CSRF attack.
Recommendations: For version 1.0, consider disabling the settings update functionality until a patch is available to prevent potential CSRF attacks. Restrict access to the settings update module to minimize the risk of exploitation.

Exploit

Fix

CSRF

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

CVE-2023-7229

Affected Products

Illi Link Party!