WordPress Plugin Vulnerabilities
Responsive Menu < 4.1.8 - Subscriber+ Arbitrary File Upload / Theme Deletion / Plugin Settings Update
Description
The plugin is missing authorisation on multiple of its AJAX actions (such as save_menu_global_settings), and relying on CSRF nonces which are disclosed to any authenticated users. As a result, it could allow them to call the affected actions and lead to arbitrary file upload, theme deletion as well as plugin settings update issues
Affects Plugins
Fixed in 4.1.8 References
CVE
Classification
Type
INCORRECT AUTHORISATION
OWASP top 10
CWE
CVSS
Miscellaneous
Original Researcher
Dave Jong
Verified
Yes
WPVDB ID
Timeline
Publicly Published
2022-03-16 (about 4 years ago)
Added
2022-03-20 (about 4 years ago)
Last Updated
2022-04-11 (about 4 years ago)
WPScan 