| Package | Affected versions | Patched versions |
|---|---|---|
| intuitive custom post order | < 3.1.4 | 3.1.4 |
The Intuitive Custom Post Order WordPress plugin before 3.1.4 does not check for authorization in the update-menu-order ajax action, allowing any logged in user (with roles as low as Subscriber) to update the menu order
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free