Non notée
CVE-2022-1793 The Private Files WordPress plugin through 0.40 is missing CSRF check when disabling the protection, which could allow…
Description
The Private Files WordPress plugin through 0.40 is missing CSRF check when disabling the protection, which could allow attackers to make a logged in admin perform such action via a CSRF attack and make the blog public
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Private Files | 0.40 | Pas de correctif indiqué |