PT-2015-5897

Name of the Vulnerable Software and Affected Versions WPML plugin versions prior to 3.1.9 Description The issue concerns the "menu sync" function, which allows remote attackers to delete arbitrary posts, pages, and menus via a crafted request to "sitepress-multilingual-cms/menu/menus-sync.php"...

CVE-2015-2791: Undefined Security Weakness

The "menu sync" function in the WPML plugin before 3.1.9 for WordPress allows remote attackers to delete arbitrary posts, pages, and menus via a crafted request to sitepress-multilingual-cms/menu/menus-sync.php...