Non notée
CVE-2022-4385 The Intuitive Custom Post Order WordPress plugin before 3.1.4 does not check for authorization in the…
Description
The Intuitive Custom Post Order WordPress plugin before 3.1.4 does not check for authorization in the update-menu-order ajax action, allowing any logged in user (with roles as low as Subscriber) to update the menu order
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Intuitive Custom Post Order 3.1 | premières → < 3.1.4 | 3.1.4 |