VYPR

CDN Linker lite

by WordPress

CVEs (1)

  • CVE-2026-8941MedMay 27, 2026
    risk 0.28cvss 4.3epss

    The CDN Linker lite plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.3.1. This is due to missing or incorrect nonce validation on the ossdl_off_options() function. This makes it possible for unauthenticated attackers to update…