Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2022-1793

Private Files <= 0.40 - Protection Disabling via CSRF

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
WPScan

Description

The Private Files WordPress plugin through 0.40 is missing CSRF check when disabling the protection, which could allow attackers to make a logged in admin perform such action via a CSRF attack and make the blog public

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Unknown Private Files

  • 0.40 to ≤ 0.40affected

References