Lucene search
+L

5 matches found

osv_cve
osv_cve
•added 2022/06/13 1:15 p.m.•18 views

CVE-2022-1788

Due to missing checks the Change Uploaded File Permissions WordPress plugin through 4.0.0 is vulnerable to CSRF attacks. This can be used to change the file and folder permissions of any folder. This could be problematic when specific files like ini files are made readable for everyone due to thi...

6.5CVSS5.5AI score0.00766EPSS
SaveExploits2References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/06/13 12:00 a.m.•3 views

CVE-2022-1788: Cross-Site Request Forgery (CSRF)

Due to missing checks the Change Uploaded File Permissions WordPress plugin through 4.0.0 is vulnerable to CSRF attacks. This can be used to change the file and folder permissions of any folder. This could be problematic when specific files like ini files are made readable for everyone due to thi...

6.5CVSS6.6AI score0.00766EPSS
SaveExploits2References2
Positive Technologies
Positive Technologies
•added 2022/06/13 12:00 a.m.•7 views

PT-2022-14113

Name of the Vulnerable Software and Affected Versions Change Uploaded File Permissions WordPress plugin through 4.0.0 Description The issue is due to missing checks, making the plugin vulnerable to CSRF attacks. This vulnerability can be used to change the file and folder permissions of any folde...

6.5CVSS0.00766EPSS
SaveExploits2References5
CNNVD
CNNVD
•added 2022/06/13 12:00 a.m.•19 views

WordPress plugin Change Uploaded File Permissions 跨站请求伪造漏洞

WordPress is a set of blogging platform developed using the PHP language. The WordPress plugin Change Uploaded File Permissions plugin 4.0.0 and earlier versions are vulnerable to cross-site request forgery, which stems from a lack of checks and can be exploited to change the file and folder...

6.5CVSS5.3AI score0.00766EPSS
SaveExploits2References2
wpexploit
wpexploit
•added 2022/05/23 12:00 a.m.•119 views

Change Uploaded File Permissions <= 4.0.0 - File Permission Update via CSRF

Due to missing checks the plugin is vulnerable to CSRF attacks. This can be used to change the file and folder permissions of any folder. This could be problematic when specific files like ini files are made readable for everyone due to this. document.getElementById"test".submit;...

6.5CVSS0.5AI score0.00766EPSS
SaveExploits2
Rows per page
Query Builder