PT-2022-14117

Name of the Vulnerable Software and Affected Versions Private Files WordPress plugin versions 0.40 and earlier Description The issue is related to a missing CSRF check when disabling protection, which could allow attackers to perform a CSRF attack on a logged-in admin, making the blog public...

CVE-2022-1793: Cross-Site Request Forgery (CSRF)

The Private Files WordPress plugin through 0.40 is missing CSRF check when disabling the protection, which could allow attackers to make a logged in admin perform such action via a CSRF attack and make the blog public...