Detections
Analytics
CVE-2022-1793
medium
Description
The Private Files WordPress plugin through 0.40 is missing CSRF check when disabling the protection, which could allow attackers to make a logged in admin perform such action via a CSRF attack and make the blog public
References
https://wpscan.com/vulnerability/fd8b84b4-6944-4638-bdc1-1cb6aaabd42c