CVE-2022-3208
Simple File List < 4.4.13 - Page Creation via CSRF
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
The Simple File List WordPress plugin before 4.4.12 does not implement nonce checks, which could allow attackers to make a logged in admin create new page and change it's content via a CSRF attack.
| CWE | CWE-352 |
| Vendor | unknown |
| Product | simple file list |
| Published | Oct 10, 2022 |
| Last Updated | Aug 3, 2024 |
Stay Ahead of the Next One
Get instant alerts for unknown simple file list
Be the first to know when new unknown vulnerabilities affecting unknown simple file list are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
Unknown / Simple File List
4.4.12 < 4.4.12
References
Credits
Raad Haddad of Cloudyrion GmbH