CVE-2022-1765

CVE-2022-1765: Hot Linked Image Cacher <= 1.16 - Image upload/cache abuse via CSRF

Vendor Unknown

Product Hot Linked Image Cacher

Weakness CWE-352 · CSRF

Published June 13, 2022

Last update August 3, 2024

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

The Hot Linked Image Cacher WordPress plugin through 1.16 is vulnerable to CSRF. This can be used to store / cache images from external domains on the server, which could lead to legal risks (due to copyright violations or licensing rules).

Key dates

02Disclosure timeline

June 13, 2022 CVE published

August 3, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2022-1765 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/352.html

Related vulnerabilities

04Related CVE

CVE-2024-8026 CSRF due to overly permissive CORS headers in netease-youdao/qanything CVE-2023-35781 WordPress LWS Cleaner Plugin <= 2.3.0 is vulnerable to Cross Site Request Forgery (CSRF) CVE-2014-0594 CSRF protection incorrectly disabled CVE-2024-11673 1000 Projects Bookstore Management System cross-site request forgery CVE-2018-25127 SOCA Access Control System 180612 Cross-Site Request Forgery via Admin Interface