https://cve.radiocsirt.org/rss/recent/all/10Most recent entries from all2026-10-06T01:17:35.743533+00:00Vulnerability-Lookupcsirt@opendfir.orgpython-feedgenContains only the most 10 recent entries.https://cve.radiocsirt.org/vuln/cve-2022-4386CVE-2022-4386 — Intuitive Custom Post Order < 3.1.4 - Arbitrary Menu Order Update via CSRF2026-10-06T01:17:35.761312+00:00
Affected: Unknown Intuitive Custom Post Order
The Intuitive Custom Post Order WordPress plugin before 3.1.4 lacks CSRF protection in its update-menu-order ajax action, allowing an attacker to trick any user to change the menu order via a CSRF attack