Lucene search
+L

42 matches found

wpexploit
wpexploit
added 2022/01/24 12:0 a.m.118 views

Float Menu < 4.3.1 - Arbitrary Menu Deletion via CSRF

The plugin does not have CSRF check in place when deleting menu, which could allow attackers to make a logged in admin delete them via a CSRF attack https://example.com/wp-admin/admin.php?page=float-menu&info=delete&did=1...

4.3CVSS4AI score0.00471EPSS
SaveExploits2References1
WPVulnDB
WPVulnDB
added 2022/01/24 12:0 a.m.23 views

Float Menu < 4.3.1 - Arbitrary Menu Deletion via CSRF

The plugin does not have CSRF check in place when deleting menu, which could allow attackers to make a logged in admin delete them via a CSRF attack PoC https://example.com/wp-admin/admin.php?page=float-menu=delete=1...

4.3CVSS3.9AI score0.00471EPSS
SaveExploits2References1Affected Software1
Rows per page
Query Builder