CVE-2022-2276

MEDIUM 4.3CVE-2022-2276 · Published 22/08/2022 · updated 17/06/2026

In short

CVE-2022-2276 is a MEDIUM (CVSS 4.3) vulnerability affecting wp edit menu (wp edit menu project).
Chance of exploitation in the next 30 days (EPSS): 0.41%, higher than 35.7% of all vulnerabilities.
Fix: update to 1.5.0 or later.

Package	Affected versions	Patched versions
wp edit menu wp_edit_menu_project	`< 1.5.0`	`1.5.0`

Description

The WP Edit Menu WordPress plugin before 1.5.0 does not have authorisation and CSRF in an AJAX action, which could allow unauthenticated attackers to delete arbitrary posts/pages from the blog

References

plugins.trac.wordpress.org/changeset · Patch
wpscan.com/vulnerability/92de9c1b-48dd-4a5f-bbb3-455f8f172b09 · Exploit

More vulnerabilities in wp edit menu

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free