CVE-2024-12774: Altra Side Menu <= 2.0 - Abitrary Menu Deletion via CSRF
Description
The Altra Side Menu WordPress plugin through 2.0 does not have CSRF checks in some places, which could allow attackers to make logged in admins delete arbitrary menu via a CSRF attack
Classification
CVE ID: CVE-2024-12774
Affected Products
Vendor: Unknown
Product: Altra Side Menu
Exploit Prediction Scoring System (EPSS)
EPSS Score: 0.04% (probability of being exploited)
EPSS Percentile: 11.72% (scored less or equal to compared to others)
EPSS Date: 2025-02-25 (when was this score calculated)