CVE-2022-25602

—

CVSS 3.1

8.8 high

EPSS

1%p69

Published

Mar 18, 2022 (Mar 18, 2022)

Modified

Jun 17, 2026

Description

Nonce token leak vulnerability leading to arbitrary file upload, theme deletion, plugin settings change discovered in Responsive Menu WordPress plugin (versions <= 4.1.7).

Vendors: expresstech
Products: responsive menu
Ecosystems: WordPress
Weakness: CWE-200, CWE-434
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (1.3%)

In the news0 stories

No ingested article mentions this CVE yet.