Intuitive Custom Post Order, 380e8535297417013cf4c7f69aeac18c10b8284b

CVE, Research URL: 380e8535297417013cf4c7f69aeac18c10b8284b
Home page URL: Security reports for Intuitive Custom Post Order
Application: Intuitive Custom Post Order
Published on: Jan 25, 2023
Research Description: Intuitive Custom Post Order [intuitive-custom-post-order] < 3.1.4 Intuitive Custom Post Order <= 3.1.3 - Missing Authorization to Authenticated Settings Change The Intuitive Custom Post Order plugin for WordPress is vulnerable to authenticated settings change in versions up to and including 3.1.3 via the 'update-menu-order-sites' AJAX action. This allows authenticated attackers with subscriber privileges or above, to change the order of sites in the sites menu on multisite installations.
Affected versions: max 3.1.4.
Status: vulnerable