CVE-2022-4745

The WP Customer Area WordPress plugin before 8.1.4 does not have CSRF checks when performing some actions such as chmod, mkdir and copy, which could allow attackers to make a logged-in admin perform them and create arbitrary folders, copy file for example.

Score

CVSS 3.1 7.1 High

Status

Modified - contact@wpscan.com

Published

2023-02-13

Last modified

2025-04-03

Affected products

• Wp Customer Area (Unknown)
• Wp Customer Area (Wp-customerarea)

References

• https://wpscan.com/vulnerability/9703f42e-bdfe-4787-92c9-47963d9af425