Security Advisory

CVE-2022-3208

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2022-10-10 00:00:00

Last updated 2024-08-03 01:00:10

Assigner WPScan

CVSS score not scored

State PUBLISHED

Description

The Simple File List WordPress plugin before 4.4.12 does not implement nonce checks, which could allow attackers to make a logged in admin create new page and change it's content via a CSRF attack.

← Browse all CVEs View on cve.org ↗