CVE-2024-12773

The Altra Side Menu WordPress plugin (versions 2.0 and earlier ) is vulnerable to an SQL injection attack. The root cause is a failure to sanitize and escape a parameter before it is used in a SQL statement. This flaw allows administrators to perform SQL injection attacks, which could impact the ...

CVE-2024-12774

The Altra Side Menu WordPress plugin, affecting versions through 2.0 , is vulnerable to a Cross-Site Request Forgery (CSRF) attack due to a lack of proper CSRF checks in certain areas. An attacker can leverage this flaw to force logged-in administrators to delete arbitrary menus , potentially lea...