title: LinkWorth Plugin < 3.3.4 - Arbitrary Setting Update via CSRF
description: The LinkWorth WordPress plugin before 3.3.4 does not implement nonce checks, which could allow attackers to make a logged in admin change settings via a CSRF attack.
problem types: CWE-352 Cross-Site Request Forgery (CSRF)
affected:
{
product: LinkWorth Plugin
vendor: Unknown
versions:
lessThan: 3.3.4, status: affected, version: 3.3.4, versionType: custom
}