CVE-2022-1793: Cross-Site Request Forgery (CSRF)

The Private Files WordPress plugin through 0.40 is missing CSRF check when disabling the protection, which could allow attackers to make a logged in admin perform such action via a CSRF attack and make the blog public...

PT-2022-14117

Name of the Vulnerable Software and Affected Versions Private Files WordPress plugin versions 0.40 and earlier Description The issue is related to a missing CSRF check when disabling protection, which could allow attackers to perform a CSRF attack on a logged-in admin, making the blog public...

WordPress plugin Private Files 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...