Medium severity4.3NVD Advisory· Published Feb 21, 2023· Updated Jun 17, 2026
CVE-2022-4386
CVE-2022-4386
Description
The Intuitive Custom Post Order WordPress plugin before 3.1.4 lacks CSRF protection in its update-menu-order ajax action, allowing an attacker to trick any user to change the menu order via a CSRF attack
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- WordPress/Intuitive Custom Post Orderdescription
- Range: <3.1.4
Patches
Vulnerability mechanics
References
1- wpscan.com/vulnerability/734064e3-afe9-4dfd-8d76-8a757cc94815nvdExploitThird Party Advisory
News mentions
0No linked articles in our index yet.