CVE-2022-2275

The CVE-2022-2275 instance concerns the WP Edit Menu WordPress plugin (versions before 1.5.0). The root cause is missing CSRF protection in an AJAX action, which could allow a logged-in administrator to delete arbitrary posts or pages via CSRF. Affected component: the plugin’s AJAX endpoint used ...