6.5
CVSSv3

CVE-2022-3208

Published: 10/10/2022 Updated: 13/10/2022
CVSS v3 Base Score: 6.5 | Impact Score: 3.6 | Exploitability Score: 2.8
VMScore: 0

Vulnerability Summary

The Simple File List WordPress plugin prior to 4.4.12 does not implement nonce checks, which could allow malicious users to make a logged in admin create new page and change it's content via a CSRF attack.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

simplefilelist simple-file-list