6.1
Moyenne
CVE-2022-4745 The WP Customer Area WordPress plugin before 8.1.4 does not have CSRF checks when performing some actions such as chmod,…
Description
The WP Customer Area WordPress plugin before 8.1.4 does not have CSRF checks when performing some actions such as chmod, mkdir and copy, which could allow attackers to make a logged-in admin perform them and create arbitrary folders, copy file for example.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| WP Customer Area 8.1 | premières → < 8.1.4 | 8.1.4 |
Autres CVE de WP Customer Area
Les 5 CVE de WP Customer Area →
CVE-2024-12436
The WP Customer Area WordPress plugin through 8.2.4 does not have CSRF checks in some places, which could allow…
4.3
Moyenne
CVE-2024-12280
The WP Customer Area WordPress plugin through 8.2.4 does not have CSRF check in place when deleting its logs, which…
4.3
Moyenne
CVE-2023-6824
The WP Customer Area WordPress plugin before 8.2.1 does not properly validates user capabilities in some of its AJAX…
6.5
Moyenne
CVE-2023-6741
The WP Customer Area WordPress plugin before 8.2.1 does not properly validate users capabilities in some of its AJAX…
4.3
Moyenne