Intuitive Custom Post Order, fb854943a69160d6e51117be558eee05e1b4c200
- CVE, Research URL
- Home page URL
- Application
- Published on
- -
- Research Description
- Intuitive Custom Post Order [intuitive-custom-post-order] <= 3.1.3 (unfixed) Intuitive Custom Post Order <= 3.1.3 - Missing Authorization to Authenticated Settings Change The Intuitive Custom Post Order plugin for WordPress is vulnerable to authenticated settings change in versions up to and including 3.1.3 via the 'update-menu-order-tags' AJAX action. This allows authenticated attackers with subscriber privileges or above, to change the order of tags in the tags menu.
- Affected versions
-
max 3.1.3.
- Status
-
vulnerable