CVE-2022-1793 Information

Description

The Private Files WordPress plugin through 0.40 is missing CSRF check when disabling the protection which could allow attackers to make a logged in admin perform such action via a CSRF attack and make the blog public

Reference

https://wpscan.com/vulnerability/fd8b84b4-6944-4638-bdc1-1cb6aaabd42c