PT-2015-5897

Name of the Vulnerable Software and Affected Versions WPML plugin versions prior to 3.1.9 Description The issue concerns the "menu sync" function, which allows remote attackers to delete arbitrary posts, pages, and menus via a crafted request to "sitepress-multilingual-cms/menu/menus-sync.php"...