CVE · Medium

CVE-2022-0313 — Float menu – awesome floating side menu [float-menu] < 4.3.1

CVE Vulnerability Type Severity Affected Fixed in Published Status
CVE-2022-0313 Float menu – awesome floating side menu [float-menu] < 4.3.1 Cross-Site Request Forgery (CSRF) Medium 4.3 < 4.3.1 4.3.1 2022-01-24

CVE-2022-0313

The Float menu plugin versions prior to 4.3.1 lack proper cross-site request forgery protection on its menu deletion function, enabling attackers to trick authenticated administrators into removing menus through a CSRF exploit.

Based on public CVE data (MITRE/NVD).

Scan your WordPress site free

No signup, no credit card — enter your URL and get a security report in seconds.