← CVE Intelligence

CVE-2022-2275

WP Edit Menu <= 1.5.0 - Arbitrary Post Deletion via CSRF PUBLISHED

Description (CNA)

The WP Edit Menu WordPress plugin before 1.5.0 does not have CSRF in an AJAX action, which could allow attackers to make a logged in admin delete arbitrary posts/pages from the blog via a CSRF attack

Affected (CNA)

Vendor / productVersions
Unknown / WP Edit Menuaffected 1.5.0 before 1.5.0

CWE

CWE-352

References

ADP enrichment

CVE

No English description supplied.