CVE-2024-3476
Assigner: WPScan
Published: 2024-05-02T06:00:03.114Z
State: PUBLISHED
title: Side Menu Lite < 4.2.1 - Menu Deletion via CSRF
problemTypes: descriptions: description: CWE-352 Cross-Site Request Forgery (CSRF)
type: CWE
affected: vendor: Unknown
product: Side Menu Lite 
versions: status: affected
versionType: semver
version: 0
lessThan: 4.2.1
defaultStatus: unaffected
descriptions: value: The Side Menu Lite  WordPress plugin before 4.2.1 does not have CSRF checks in some bulk actions, which could allow attackers to make logged in admins perform unwanted actions, such as deleting buttons via CSRF attacks
credits: value: Bob Matyas
type: finder
value: WPScan
type: coordinator
source: discovery: EXTERNAL
x_generator: engine: WPScan CVE Generator