Lucene search

K
patchstackDave Jong (Patchstack)PATCHSTACK:77D5AFBDD3F8AB4907D97AFF1A8C9B7C
HistoryMar 16, 2022 - 12:00 a.m.

WordPress Responsive Menu plugin <= 4.1.7 - Nonce token leak leading to arbitrary file upload, theme deletion, plugin settings change vulnerability

2022-03-1600:00:00
Dave Jong (Patchstack)
patchstack.com
18

0.001 Low

EPSS

Percentile

42.9%

Nonce token leak leading to arbitrary file upload, theme deletion, plugin settings change vulnerability discovered by Dave Jong (Patchstack) in WordPress Responsive Menu plugin (versions <= 4.1.7).

Solution

           Update the WordPress Responsive Menu plugin to the latest available version (at least 4.1.8).
CPENameOperatorVersion
responsive menule4.1.7

0.001 Low

EPSS

Percentile

42.9%

Related for PATCHSTACK:77D5AFBDD3F8AB4907D97AFF1A8C9B7C