The "menu sync" function in the WPML plugin before 3.1.9... · CVE-2015-2791 · GitHub Advisory Database · GitHub

The "menu sync" function in the WPML plugin before 3.1.9...

Moderate severity Unreviewed Published May 14, 2022 to the GitHub Advisory Database • Updated Feb 2, 2023

Package

No package listed— Suggest a package

Affected versions

Unknown

Patched versions

Unknown

Description

The "menu sync" function in the WPML plugin before 3.1.9 for WordPress allows remote attackers to delete arbitrary posts, pages, and menus via a crafted request to sitepress-multilingual-cms/menu/menus-sync.php.

References

Published by the National Vulnerability Database

Mar 30, 2015

Published to the GitHub Advisory Database May 14, 2022

Last updated Feb 2, 2023