← Database

CVE-2022-3208

MEDIUM CVSS: 6.5 Published: 2022-10-10 Modified: 2026-06-17

Description

The Simple File List WordPress plugin before 4.4.12 does not implement nonce checks, which could allow attackers to make a logged in admin create new page and change it's content via a CSRF attack.

Affected Platforms

Simplefilelist Simple-File-List

Weakness Type

CWE-352

References