Lucene search

K
prionPRIOn knowledge basePRION:CVE-2022-1793
HistoryJun 13, 2022 - 1:15 p.m.

Cross site request forgery (csrf)

2022-06-1313:15:00
PRIOn knowledge base
www.prio-n.com
4

4.6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

25.9%

The Private Files WordPress plugin through 0.40 is missing CSRF check when disabling the protection, which could allow attackers to make a logged in admin perform such action via a CSRF attack and make the blog public

CPENameOperatorVersion
private_fileseq0.40

4.6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

25.9%