Approved changes feed: RSS · Atom

cpe:2.3:a:unknown:wp_edit_menu:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorUnknown (668ca391-a6cc-5e33-879b-83885214de33)
ProductWp Edit Menu (556b045f-3586-51ab-85ef-7989c81075c1)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-2276 vulnerable 2026-06-08 05:43:35.185605 WP Edit Menu < 1.5.0 - Unauthenticated Arbitrary Post Deletion
The WP Edit Menu WordPress plugin before 1.5.0 does not have authorisation and CSRF in an AJAX action, which could allow unauthenticated attackers to delete arbitrary posts/pages from the blog
Published: 2022-08-22T15:00:57.000Z
Updated: 2024-08-03T00:32:09.597Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-2275 vulnerable 2026-06-08 05:43:35.184303 WP Edit Menu <= 1.5.0 - Arbitrary Post Deletion via CSRF
The WP Edit Menu WordPress plugin before 1.5.0 does not have CSRF in an AJAX action, which could allow attackers to make a logged in admin delete arbitrary posts/pages from the blog via a CSRF attack
Published: 2022-08-22T15:00:37.000Z
Updated: 2024-08-03T00:32:09.357Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.