Intuitive Custom Post Order ProjectIntuitive Custom Post Order
2 matches found
CVE-2022-4386
CVE-2022-4386 corresponds to a CSRF in the WordPress plugin Intuitive Custom Post Order, affecting versions up to 3.1.3. The update-menu-order AJAX action lacks CSRF protection, enabling an attacker to induce a user to change menu order. The entry notes vulnerability details and explicitly lists ...
4.3CVSS4.4AI score0.00267EPSS
SaveWeb