CVE-2022-1765

Hot Linked Image Cacher <= 1.16 - Image upload/cache abuse via CSRF

The Hot Linked Image Cacher WordPress plugin through 1.16 is vulnerable to CSRF. This can be used to store / cache images from external domains on the server, which could lead to legal risks (due to copyright violations or licensing rules).

Affected

Hot Linked Image Cacher

CVSS v3.1 NVD

8.8 HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CVSS v2.0 NVD

6.8 MEDIUMAV:N/AC:M/Au:N/C:P/I:P/A:P

EPSS

0.61% chance of exploitation in the next 30 days, 48th percentile

Published

2022-06-13

Updated

2024-08-03

Proof-of-concept exploits (1)

• https://wpscan.com/vulnerability/b50e7622-c1dc-485b-a5f5-b010b40eef20

References

• CVE Record
• NVD entry