CVE-2021-24635

MEDIUM

Visual Link Preview < 2.2.3 - Authenticated Improper Access Control via AJAX Actions

Title source: llm
STIX 2.1

Description

The Visual Link Preview WordPress plugin before 2.2.3 does not enforce authorisation on several AJAX actions and has the CSRF nonce displayed for all authenticated users, allowing any authenticated user (such as subscriber) to call them and 1) Get and search through title and content of Draft post, 2) Get title of a password-protected post as well as 3) Upload an image from an URL

References (1)

Core 1
Core References
Exploit, Third Party Advisory x_refsource_misc
https://wpscan.com/vulnerability/854b23d9-e3f8-4835-8d29-140c580f11c9

Scores

CVSS v3 5.4
EPSS 0.0062
EPSS Percentile 44.9%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

Details

CWE
CWE-284 CWE-862
Status published
Products (1)
bootstrapped/visual_link_preview < 2.2.3
Published Sep 20, 2021
Tracked Since Feb 18, 2026