Private Files <= 0.40 - Protection Disabling via CSRF

🗓️ 23 May 2022 00:00:00Reported by Daniel RufType

Plugin missing CSRF check for protection disablin

Reporter	Title	Published	Views	Family All 7
CVE	CVE-2022-1793	13 Jun 202213:15	–	cve
Patchstack	WordPress Private Files plugin <= 0.40 - Protection Disabling via Cross-Site Request Forgery (CSRF) vulnerability	23 May 202200:00	–	patchstack
wpexploit	Private Files <= 0.40 - Protection Disabling via CSRF	23 May 202200:00	–	wpexploit
CNVD	WordPress Private Files plugin跨站请求伪造漏洞	15 Jun 202200:00	–	cnvd
Cvelist	CVE-2022-1793 Private Files <= 0.40 - Protection Disabling via CSRF	13 Jun 202212:43	–	cvelist
NVD	CVE-2022-1793	13 Jun 202213:15	–	nvd
Prion	Cross site request forgery (csrf)	13 Jun 202213:15	–	prion

Vulners

Node

private_files_project private_fileswordpress

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

23 May 2022 00:00Current

4.8Medium risk

Vulners AI Score4.8

EPSS0.001