CVE-2024-2405

The Float menu – awesome floating side menu plugin through version 6.0 contains a cross-site request forgery vulnerability stemming from inadequate nonce validation in the float-menu function. An unauthenticated attacker could exploit this flaw to remove menu items by crafting a malicious request and convincing a site administrator to interact with it, such as by clicking a link. The vulnerability affects all versions up to and including 6.0, and is resolved in version 6.0.1.

Based on public CVE data (MITRE/NVD).