CVE-2022-1793 — Private Files <= 0.40 - Protection Disabling via CSRF
The Private Files WordPress plugin through 0.40 is missing CSRF check when disabling the protection, which could allow attackers to make a logged in admin perform such action vi…
Published: 2022-06-13 · CVSS: Unscored
The Private Files WordPress plugin through 0.40 is missing CSRF check when disabling the protection, which could allow attackers to make a logged in admin perform such action via a CSRF attack and make the blog public
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7