The Intuitive Custom Post Order... CVE-2022-4385

- AV AC AU C I A
发布: 2023-02-21
修订: 2024-11-21

The Intuitive Custom Post Order WordPress plugin before 3.1.4 does not check for authorization in the update-menu-order ajax action, allowing any logged in user (with roles as low as Subscriber) to update the menu order

0%
暂无可用Exp或PoC
当前有1条受影响产品信息