Security Advisory

CVE-2022-2275

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2022-08-22 15:00:37

Last updated 2024-08-03 00:32:09

Assigner WPScan

CVSS score not scored

State PUBLISHED

Description

The WP Edit Menu WordPress plugin before 1.5.0 does not have CSRF in an AJAX action, which could allow attackers to make a logged in admin delete arbitrary posts/pages from the blog via a CSRF attack

← Browse all CVEs View on cve.org ↗