Lucene search
PRIOn knowledge basePRION:CVE-2022-4385HistoryFeb 21, 2023 - 9:15 a.m.
Authorization
2023-02-2109:15:00
PRIOn knowledge base
www.prio-n.com
4
intuitive custom post order
update menu order
authorization bypass
wordpress plugin
security issue
nvd
The Intuitive Custom Post Order WordPress plugin before 3.1.4 does not check for authorization in the update-menu-order ajax action, allowing any logged in user (with roles as low as Subscriber) to update the menu order
| CPE | Name | Operator | Version |
|---|---|---|---|
| intuitive_custom_post_order | lt | 3.1.4 |
Related
wpexploit
wpexploit
wpvulndb
wpvulndb
cve
cve
CVE-2022-4385
2023-02-21 09:15:10
cvelist
cvelist
nvd
nvd
CVE-2022-4385
2023-02-21 09:15:10
openvas
openvas