Vulnerabilities > CVE-2022-4385 - Unspecified vulnerability in Intuitive Custom Post Order Project Intuitive Custom Post Order
Attack vector
NETWORK Attack complexity
LOW Privileges required
LOW Confidentiality impact
NONE Integrity impact
LOW Availability impact
NONE Summary
The Intuitive Custom Post Order WordPress plugin before 3.1.4 does not check for authorization in the update-menu-order ajax action, allowing any logged in user (with roles as low as Subscriber) to update the menu order
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 1 |