Wp Edit Menu Project Wp Edit Menu — known CVE vulnerabilities

Every CVE whose affected-product data names Wp Edit Menu Project Wp Edit Menu, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (2)

• CVE-2022-2275 — CVSS 4.3 (medium): The WP Edit Menu WordPress plugin before 1.5.0 does not have CSRF in an AJAX action, which could allow attackers to make a logged in admin…
• CVE-2022-2276 — CVSS 4.3 (medium): The WP Edit Menu WordPress plugin before 1.5.0 does not have authorisation and CSRF in an AJAX action, which could allow unauthenticated…