Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
1 selected

1 record

Vendor: Wp-customerarea Clear all filters
TI-2022-04341 CVE-2022-4745 · GHSA-xqmw-24v9-r296

WP Customer Area < 8.1.4 - Unauthorised Actions via CSRF

Priority MEDIUM 64

The WP Customer Area WordPress plugin before 8.1.4 does not have CSRF checks when performing some actions such as chmod, mkdir and copy, which could allow attackers to make a logged-in admin perform them and create arbit…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00276 Published 2023-02-13 Fixed in 8.1.4