CVE-2022-3208CWE-352

Simple File List < 4.4.13 - Page Creation via CSRF

published October 10, 2022

CVSS
—
EPSS
0%
Percentile
34.2
In the wild
Unconfirmed
What it is

The Simple File List WordPress plugin before 4.4.12 does not implement nonce checks, which could allow attackers to make a logged in admin create new page and change it's content via a CSRF attack.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00411 · 34.2th percentile
Weakness
CWE-352 · Cross-Site Request Forgery (CSRF)
Published
2022-10-10T00:00Z
EPSS history
Timeline
  • 10 OCT 00:00Z
    Simple File List < 4.4.13 - Page Creation via CSRF
    cvelistv5