8.3
High
CVE-2022-25602 Nonce token leak vulnerability leading to arbitrary file upload, theme deletion, plugin settings change discovered in…
Description
Nonce token leak vulnerability leading to arbitrary file upload, theme deletion, plugin settings change discovered in Responsive Menu WordPress plugin (versions <= 4.1.7).
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Responsive Menu (WordPress plugin) 4.1 | earliest → 4.1.7 | No fix stated |