Altra Side Menu WordPress Plugin Cross-Site Request Forgery Vulnerability
Vulnerability
A cross-site request forgery (CSRF) vulnerability has been identified in the Altra Side Menu WordPress plugin, affecting versions through 2.0. The vulnerability arises because the plugin lacks adequate CSRF protections in certain areas, potentially allowing attackers to exploit logged-in administrators into deleting arbitrary menu items.
Impact
Exploitation of this vulnerability could lead to unauthorized deletion of menu items by exploiting the CSRF weakness, targeting logged-in admin users.
Added: Jun 9, 2025, 7:46 PM
Updated: Jun 9, 2025, 7:46 PM
Vulnerability Rating
Custom Algorithm
spread
0.0impact
0.6exploitability
7.7remediation
0.0relevance
0.0threat
6.4urgency
2.9incentive
1.7Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.