Lucene search

K
prionPRIOn knowledge basePRION:CVE-2022-3208
HistoryOct 10, 2022 - 9:15 p.m.

Cross site request forgery (csrf)

2022-10-1021:15:00
PRIOn knowledge base
www.prio-n.com
2
csrf attack
wordpress
nonce checks
admin
plugin vulnerability

6.4 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

26.5%

The Simple File List WordPress plugin before 4.4.12 does not implement nonce checks, which could allow attackers to make a logged in admin create new page and change it’s content via a CSRF attack.

CPENameOperatorVersion
simple-file-listlt4.4.12

6.4 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

26.5%