Cross-Site Request Forgery Vulnerability in CDN Linker Lite Plugin for WordPress

CVE-2026-8941

What is CVE-2026-8941?

The CDN Linker Lite plugin for WordPress has a vulnerability due to improper nonce validation in the ossdl_off_options() function. This flaw enables unauthenticated attackers to exploit the plugin, risking unauthorized modifications to its settings. If an administrator can be deceived into clicking a rogue link, the attackers can alter crucial settings such as the CDN URL. This makes the site susceptible to malicious actions that could affect all static asset references, leading to potential data leaks or further exploitation.

References