What’s Vulnerable › Vulnerabilities

CVE-2022-1788: Change Uploaded File Permissions <= 4.0.0 - File Permission Update via CSRF

• Severity: medium (CVSS 6.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.8% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2022-06-13 · updated 2026-06-17
• Weakness: CWE-352

Description

Due to missing checks the Change Uploaded File Permissions WordPress plugin through 4.0.0 is vulnerable to CSRF attacks. This can be used to change the file and folder permissions of any folder. This could be problematic when specific files like ini files are made readable for everyone due to this.

Affected products

• Change Uploaded File Permissions: through 4.0.0

References

• https://wpscan.com/vulnerability/c39719e5-dadd-4414-a96d-5e70a1e3d462
• https://wpscan.com/vulnerability/c39719e5-dadd-4414-a96d-5e70a1e3d462

Get alerted when CVE-2022-1788 or the next vulnerability affects your stack