Not rated
CVE-2022-1793 The Private Files WordPress plugin through 0.40 is missing CSRF check when disabling the protection, which could allow…
Description
The Private Files WordPress plugin through 0.40 is missing CSRF check when disabling the protection, which could allow attackers to make a logged in admin perform such action via a CSRF attack and make the blog public
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Private Files | 0.40 | No fix stated |