CVE-2022-3208 — Simple File List < 4.4.13 - Page Creation via CSRF
The Simple File List WordPress plugin before 4.4.12 does not implement nonce checks, which could allow attackers to make a logged in admin create new page and change it's conten…
Published: 2022-10-10 · CVSS: Unscored
The Simple File List WordPress plugin before 4.4.12 does not implement nonce checks, which could allow attackers to make a logged in admin create new page and change it's content via a CSRF attack.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7