CVE-2022-0313CWE-352

CVE-2022-0313: vulnerability in Float menu – awesome floating side menu

Float Menu < 4.3.1 - Arbitrary Menu Deletion via CSRF

Published · Updated

Follow this CVE+ Monitor Float menu – awesome floating side menu

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 0.5%
The Float menu WordPress plugin before 4.3.1 does not have CSRF check in place when deleting menu, which could allow attackers to make a logged in admin delete them via a CSRF attack
Affected products
Unknown · Float menu – awesome floating side menu