PatchTheCVEwp edit menu vulnerabilities and fixes
Recent CVEs affecting wp edit menu, with upgrade or downgrade steps. 2 tracked.
Also searched as: wpeditmenu.
wp edit menu has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 2. Most recent: 2022-08-22. Highest priority: CVE-2022-2276 (score 29/100).
- CVE-2022-2276 MEDIUM 4.3 UPGRADE The WP Edit Menu WordPress plugin before 1.5.0 does not have authorisation and CSRF in an AJAX action, which c
- CVE-2022-2275 MEDIUM 4.3 UPGRADE The WP Edit Menu WordPress plugin before 1.5.0 does not have CSRF in an AJAX action, which could allow attacke
FAQ
How do I fix wp edit menu vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is wp edit menu being exploited right now?
None of the tracked wp edit menu CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which wp edit menu CVE should I patch first?
CVE-2022-2276 currently ranks highest (29/100): The WP Edit Menu WordPress plugin before 1.5.0 does not have authorisation and CSRF in an AJAX action, which c.