GCVE - cpe:2.3:a:menu_swapper_project:menu_swapper:*:*:*:*:*:wordpress:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:menu_swapper_project:menu_swapper:*:*:*:*:*:wordpress:*:*

part: a version: * update: *

Vendor	Menu Swapper Project (`fa5d587e-6bce-5b4e-9f88-b01f959a77de`)
Product	Menu Swapper (`df22a2a6-4db0-592b-883f-f27a95848d73`)
Edition	*
Language	*
Software edition	*
Target software	wordpress
Target hardware	*
Other	*

Notes

Imported from gcve-enriched-dumps CVE data

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2020-36746`	vulnerable	2026-06-08 05:25:49.524554	Menu Swapper <= 1.1.0.2 - Cross-Site Request Forgery Bypass MEDIUM (4.3) The Menu Swapper plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.1.0.2. This is due to missing or incorrect nonce validation on the mswp_save_meta() function. This makes it possible for unauthenticated attackers to save meta data via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. Published: 2023-07-01T05:33:24.871Z Updated: 2026-04-08T16:50:32.915Z Open on db.gcve.eu Reference links https://www.wordfence.com/threat-intel/vulnerabilities/id/49a04155-9fa8-45e0-b80b-3836d5271fa7?source=cve https://blog.nintechnet.com/25-wordpress-plugins-vulnerable-to-csrf-attacks/ https://blog.nintechnet.com/more-wordpress-plugins-and-themes-vulnerable-to-csrf-attacks/ https://blog.nintechnet.com/multiple-wordpress-plugins-fixed-csrf-vulnerabilities-part-3/ https://blog.nintechnet.com/multiple-wordpress-plugins-fixed-csrf-vulnerabilities-part-2/	Imported from gcve-enriched-dumps CVE data

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open this panel to browse, search, copy or download the JSON record.