ZeroHour

CVE-2024-12774

PoC
CVSS 3.1
6.5 medium
EPSS
<1%p13
Published
()
Modified
Description

The Altra Side Menu WordPress plugin through 2.0 does not have CSRF checks in some places, which could allow attackers to make logged in admins delete arbitrary menu via a CSRF attack

Vendors
pulseextensions
Products
altra side menu
Ecosystems
WordPress
Weakness
CWE-352
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

In the news

No ingested article mentions this CVE yet.