CVE-2024-2405 – The Float menu WordPress plugin before 6.0.1 does not have CSRF check in its bulk …

Vuln ID: CVE-2024-2405

Published:  2024-05-02  06:15:49.947

Description: The Float menu WordPress plugin before 6.0.1 does not have CSRF check in its bulk actions, which could allow attackers to make logged in admin delete arbitrary menu via a CSRF attack.

Base Score:

Vector:

Source: NVD.NIST.GOV

 


Date:

Categorie(s):

Tag(s):