title: Simple File List < 4.4.13 - Page Creation via CSRF
description: The Simple File List WordPress plugin before 4.4.12 does not implement nonce checks, which could allow attackers to make a logged in admin create new page and change it's content via a CSRF attack.
problem types: CWE-352 Cross-Site Request Forgery (CSRF)
affected:
{
vendor: Unknown
product: Simple File List
versions:
version: 4.4.12, status: affected, lessThan: 4.4.12, versionType: custom
}