CVE-2022-1788CWE-352

Change Uploaded File Permissions <= 4.0.0 - File Permission Update via CSRF

published June 13, 2022

CVSS
—
EPSS
1%
Percentile
55.0
In the wild
Unconfirmed
What it is

Due to missing checks the Change Uploaded File Permissions WordPress plugin through 4.0.0 is vulnerable to CSRF attacks. This can be used to change the file and folder permissions of any folder. This could be problematic when specific files like ini files are made readable for everyone due to this.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00766 · 55.0th percentile
Weakness
CWE-352 · Cross-Site Request Forgery (CSRF)
Published
2022-06-13T12:42Z
EPSS history
Timeline
  • 13 JUN 12:42Z
    Change Uploaded File Permissions <= 4.0.0 - File Permission Update via CSRF
    cvelistv5