Vulnerabilities

TI-2022-01469 CVE-2022-1599 · GHSA-5fff-r5vh-5wpc

Admin Management Xtended < 2.4.5 - Post Visibility/Date/Comment Status Update via CSRF

LOW 30

The Admin Management Xtended WordPress plugin before 2.4.5 does not have CSRF checks in some of its AJAX actions, allowing attackers to make a logged users with the right capabilities to call them.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00713 Published 2022-07-11 Fixed in 2.4.5 CWE-352

TI-2022-11920 CVE-2022-29450 · GHSA-wqf5-hq9v-f764

WordPress Admin Management Xtended plugin <= 2.4.4 - Multiple Cross-Site Request Forgery (CSRF) vulnerabilities

LOW 38

Multiple Cross-Site Request Forgery (CSRF) vulnerabilities in Admin Management Xtended plugin <= 2.4.4 at WordPress.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.0041 Published 2022-06-15 No fix listed CWE-352

TI-2015-07767 CVE-2015-9390 · GHSA-qwgx-p5hh-8f93

The admin-management-xtended plugin before 2.4.0.1 for WordPress has privilege escalation…

LOW 22

The admin-management-xtended plugin before 2.4.0.1 for WordPress has privilege escalation because wp_ajax functions are mishandled.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00899 Published 2019-09-20 No fix listed CWE-269

Vulnerabilities

Filters

Admin Management Xtended < 2.4.5 - Post Visibility/Date/Comment Status Update via CSRF

WordPress Admin Management Xtended plugin <= 2.4.4 - Multiple Cross-Site Request Forgery (CSRF) vulnerabilities

The admin-management-xtended plugin before 2.4.0.1 for WordPress has privilege escalation…