← CVE Intelligence

CVE-2022-1793

Private Files <= 0.40 - Protection Disabling via CSRF PUBLISHED

Description (CNA)

The Private Files WordPress plugin through 0.40 is missing CSRF check when disabling the protection, which could allow attackers to make a logged in admin perform such action via a CSRF attack and make the blog public

Affected (CNA)

Vendor / productVersions
Unknown / Private Filesaffected 0.40 through 0.40

CWE

CWE-352

References

ADP enrichment

CVE

No English description supplied.