Lucene search
Krzysztof ZającWPEX-ID:1CE6C8F4-6F4B-4D56-8D11-43355EF32E8CHistoryJan 24, 2022 - 12:00 a.m.
Float Menu < 4.3.1 - Arbitrary Menu Deletion via CSRF
2022-01-2400:00:00
Krzysztof Zając
80
0.001 Low
EPSS
Percentile
30.0%
The plugin does not have CSRF check in place when deleting menu, which could allow attackers to make a logged in admin delete them via a CSRF attack
https://example.com/wp-admin/admin.php?page=float-menu&info=delete&did=1Related
wpvulndb
wpvulndb
Float Menu < 4.3.1 - Arbitrary Menu Deletion via CSRF
2022-01-24 00:00:00
patchstack
patchstack
cvelist
cvelist
CVE-2022-0313 Float Menu < 4.3.1 - Arbitrary Menu Deletion via CSRF
2022-02-21 10:46:15
nvd
nvd
CVE-2022-0313
2022-02-21 11:15:09
prion
prion
Cross site request forgery (csrf)
2022-02-21 11:15:00
cve
cve
CVE-2022-0313
2022-02-21 11:15:09