Lucene search
+L

CVE-2022-4385

🗓️ 21 Feb 2023 08:50:40Reported by WPScanType 
cve
 cve
🔗 web.nvd.nist.gov👁 58 Views🌐 WEB

The Intuitive Custom Post Order WordPress plugin before 3.1.4 allows unauthorized menu order updat

Related
Detection
Affected
Refs
Paths
ReporterTitlePublishedViews
Family
Circl
CVE-2022-4385
21 Feb 202312:21
circl
CNNVD
WordPress Plugin Intuitive Custom Post Order 安全漏洞
21 Feb 202300:00
cnnvd
Cvelist
CVE-2022-4385 Intuitive Custom Post Order < 3.1.4 - Subscriber+ Arbitrary Menu Order Update
21 Feb 202308:50
cvelist
EUVD
EUVD-2022-51734
3 Oct 202520:07
euvd
NVD
CVE-2022-4385
21 Feb 202309:15
nvd
OpenVAS
WordPress Intuitive Custom Post Order Plugin < 3.1.4 Multiple Vulnerabilities
12 Jul 202300:00
openvas
OSV
CVE-2022-4385
21 Feb 202309:15
osv
Patchstack
WordPress Intuitive Custom Post Order Plugin <= 3.1.3 is vulnerable to Broken Access Control
24 Jan 202300:00
patchstack
Prion
Authorization
21 Feb 202309:15
prion
RedhatCVE
CVE-2022-4385
23 May 202500:00
redhatcve
Rows per page
NVD
Vulners
[
  {
    "vendor": "Unknown",
    "product": "Intuitive Custom Post Order",
    "versions": [
      {
        "status": "affected",
        "versionType": "custom",
        "version": "0",
        "lessThan": "3.1.4"
      }
    ],
    "defaultStatus": "unaffected",
    "collectionURL": "https://wordpress.org/plugins"
  }
]
ParameterPositionPathDescriptionCWE
actionrequest body/wp-admin/admin-ajax.phpAuthorization not checked for update-menu-order AJAX action allowing low-privilege users to modify menu orderCWE-862
orderrequest body/wp-admin/admin-ajax.phpAuthorization not checked for update-menu-order AJAX action allowing low-privilege users to modify menu orderCWE-862

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

17 Jun 2026 05:20Current
4.5Medium risk
Vulners AI Score4.5
CVSS 3.14.3
EPSS0.00486
SSVC
58