Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
wpvulndbYuya KotakeWPVDB-ID:8F900D37-6EEE-4434-8B9B-D10CC4A9167C
HistoryJan 24, 2023 - 12:00 a.m.

Intuitive Custom Post Order < 3.1.4 - Subscriber+ Arbitrary Menu Order Update

2023-01-2400:00:00
Yuya Kotake
wpscan.com
7
plugin
subscriber
arbitrary
menu order
update
authorization check

0.001 Low

EPSS

Percentile

23.4%

JSON

The plugin does not check for authorization in the update-menu-order ajax action, allowing any logged in user (with roles as low as Subscriber) to update the menu order

PoC

Open the below HTML while being logged in as a subscriber

CPENameOperatorVersion
intuitive-custom-post-orderlt3.1.4

Related

wpexploit 1
prion 1
cve 1
cvelist 1
nvd 1
openvas 1
wpexploit
wpexploit
Intuitive Custom Post Order < 3.1.4 - Subscriber+ Arbitrary Menu Order Update
2023-01-24 00:00:00
prion
prion
Authorization
2023-02-21 09:15:00
cve
cve
CVE-2022-4385
2023-02-21 09:15:10
cvelist
cvelist
CVE-2022-4385 Intuitive Custom Post Order < 3.1.4 - Subscriber+ Arbitrary Menu Order Update
2023-02-21 08:50:40
nvd
nvd
CVE-2022-4385
2023-02-21 09:15:10
openvas
openvas
WordPress Intuitive Custom Post Order Plugin < 3.1.4 Multiple Vulnerabilities
2023-07-12 00:00:00

0.001 Low

EPSS

Percentile

23.4%

JSON
Related for WPVDB-ID:8F900D37-6EEE-4434-8B9B-D10CC4A9167C
wpexploit1prion1cve1cvelist1nvd1openvas1