Read the docs

Private Files Project

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Private Files Project records in CISA KEV

No Private Files Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Private Files 1 record LOW

Records

1 record in Private Files · all components

TI-2022-01659 CVE-2022-1793 · GHSA-fcq7-cgmv-f8gw

Private Files <= 0.40 - Protection Disabling via CSRF

Priority LOW 20

The Private Files WordPress plugin through 0.40 is missing CSRF check when disabling the protection, which could allow attackers to make a logged in admin perform such action via a CSRF attack and make the blog public

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00435 Published 2022-06-13 No fix listed CWE-352
Open these records in search →