Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Vendor: Wp Edit Menu Project Clear all filters
TI-2022-02101 CVE-2022-2276 · GHSA-6xp2-3wp8-xhf3

WP Edit Menu < 1.5.0 - Unauthenticated Arbitrary Post Deletion

Priority LOW 20

The WP Edit Menu WordPress plugin before 1.5.0 does not have authorisation and CSRF in an AJAX action, which could allow unauthenticated attackers to delete arbitrary posts/pages from the blog

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00413 Published 2022-08-22 Fixed in 1.5.0 CWE-352
TI-2022-02100 CVE-2022-2275 · GHSA-gmfj-x9cj-5fh4

WP Edit Menu <= 1.5.0 - Arbitrary Post Deletion via CSRF

Priority LOW 20

The WP Edit Menu WordPress plugin before 1.5.0 does not have CSRF in an AJAX action, which could allow attackers to make a logged in admin delete arbitrary posts/pages from the blog via a CSRF attack

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00345 Published 2022-08-22 Fixed in 1.5.0 CWE-352