CVE-2022-4386 | BDVDB-2026-195949 Detail

Description#

The Intuitive Custom Post Order WordPress plugin before 3.1.4 lacks CSRF protection in its update-menu-order ajax action, allowing an attacker to trick any user to change the menu order via a CSRF attack

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12023-02-21Record published in the CVE List.
2. Version 22025-03-12Most recent update recorded in the CVE List.