Vulnerabilities > CVE-2022-2276 - Missing Authorization vulnerability in WP Edit Menu Project WP Edit Menu
Attack vector
NETWORK Attack complexity
LOW Privileges required
NONE Confidentiality impact
NONE Integrity impact
LOW Availability impact
NONE Summary
The WP Edit Menu WordPress plugin before 1.5.0 does not have authorisation and CSRF in an AJAX action, which could allow unauthenticated attackers to delete arbitrary posts/pages from the blog
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 1 |