CVE-2015-2791

The "menu sync" function in the WPML plugin before 3.1.9 for WordPress allows remote attackers to delete arbitrary posts, pages, and menus via a crafted…

published March 30, 2015

CVSS
—
EPSS
13%
Percentile
96.4
In the wild
Unconfirmed
What it is

The "menu sync" function in the WPML plugin before 3.1.9 for WordPress allows remote attackers to delete arbitrary posts, pages, and menus via a crafted request to sitepress-multilingual-cms/menu/menus-sync.php.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.13294 · 96.4th percentile
Published
2015-03-30T14:00Z
EPSS history
Timeline
  • 30 MAR 14:00Z
    The "menu sync" function in the WPML plugin before 3.1.9 for WordPress allows remote attackers to delete arbitrary posts, pages, and menus via a crafted…
    cvelistv5