CVE-2022-25602

Description

References

• patchstack.com/database/vulnerability/responsive-menu/wordpress-responsive-menu-plugin-4-1-7-nonce-token-leak-leading-to-arbitrary-file-upload-theme-deletion-plugin-settings-change-vulnerability · Third Party Advisory
• wordpress.org/plugins/responsive-menu · Product

responsive menu의 다른 취약점

• CVE-2021-24162높음 8.8In the Reponsive Menu (free and Pro) WordPress plugins before 4.0.4, attackers could craft a request and trick an administrator into importi…
• CVE-2021-24161높음 8.8In the Reponsive Menu (free and Pro) WordPress plugins before 4.0.4, attackers could craft a request and trick an administrator into uploadi…
• CVE-2021-24160높음 8.8In the Reponsive Menu (free and Pro) WordPress plugins before 4.0.4, subscribers could upload zip archives containing malicious PHP files th…
• CVE-2017-18513높음 8.8The responsive-menu plugin before 3.1.4 for WordPress has no CSRF protection mechanism for the admin interface.