Lucene search
Daniel RufPATCHSTACK:4BAB82675C964F5E7ACB4DC681291808HistoryMay 23, 2022 - 12:00 a.m.
WordPress Change Uploaded File Permissions plugin <= 4.0.0 - File Permission Update via Cross-Site Request Forgery (CSRF) vulnerability
2022-05-2300:00:00
Daniel Ruf
patchstack.com
14
wordpress
file permissions
csrf
vulnerability
daniel ruf
EPSS
0.001
Percentile
26.3%
File Permission Update via Cross-Site Request Forgery (CSRF) vulnerability was discovered by Daniel Ruf in the WordPress Change Uploaded File Permissions plugin (versions <= 4.0.0).
Solution
Deactivate and delete. This plugin has been closed as of May 18, 2022 and is not available for download. This closure is temporary, pending a full review.
Related
cve
cve
CVE-2022-1788
2022-06-13 13:15:12
prion
prion
Cross site request forgery (csrf)
2022-06-13 13:15:00
wpexploit
wpexploit
Change Uploaded File Permissions <= 4.0.0 - File Permission Update via CSRF
2022-05-23 00:00:00
cnvd
cnvd
WordPress插件Change Uploaded File Permissions跨站请求伪造漏洞
2022-06-15 00:00:00
nvd
nvd
CVE-2022-1788
2022-06-13 13:15:12
cvelist
cvelist
wpvulndb
wpvulndb
Change Uploaded File Permissions <= 4.0.0 - File Permission Update via CSRF
2022-05-23 00:00:00