Medium severity4.3NVD Advisory· Published Feb 21, 2023· Updated Jun 17, 2026
CVE-2022-4385
CVE-2022-4385
Description
The Intuitive Custom Post Order WordPress plugin before 3.1.4 does not check for authorization in the update-menu-order ajax action, allowing any logged in user (with roles as low as Subscriber) to update the menu order
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- WordPress/Intuitive Custom Post Orderdescription
- Range: <3.1.4
Patches
Vulnerability mechanics
References
1- wpscan.com/vulnerability/8f900d37-6eee-4434-8b9b-d10cc4a9167cnvdExploitThird Party Advisory
News mentions
0No linked articles in our index yet.