HT Menu < 1.2.2 - Cross-Site Request Forgery

2023-03-3000:00:00

wpscan.com

ht menu

plugin

csrf

vulnerability

software

0.001 Low

EPSS

Percentile

24.2%

JSON

The plugin does not adequately validate certain requests use nonces, which can lead to a Cross-Site Request Forgery (CSRF) vulnerability.

CPENameOperatorVersion
ht-menu-litelt1.2.2

CPE	Name	Operator	Version
	ht-menu-lite	lt	1.2.2

References

patchstack.com/database/vulnerability/ht-menu-lite/wordpress-ht-menu-wordpress-mega-menu-builder-for-elementor-plugin-1-2-1-cross-site-request-forgery-csrf-vulnerability

0.001 Low

EPSS

Percentile

24.2%

JSON

Related for WPVDB-ID:23CF0136-8407-4EF4-BDBD-6DF7B8D6D6A1