CVE-2024-3476: Side Menu Lite < 4.2.1 - Menu Deletion via CSRF
The Side Menu Lite WordPress plugin before 4.2.1 does not have CSRF checks in some bulk actions, which could allow attackers to make logged in admins perform unwanted actions, such as deleting buttons via CSRF attacks
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-3476?
CVE-2024-3476 has a medium severity rating due to the lack of CSRF protections allowing unauthorized actions.
How do I fix CVE-2024-3476?
To fix CVE-2024-3476, update the Side Menu Lite plugin to version 4.2.1 or later.
What types of attacks are possible with CVE-2024-3476?
CVE-2024-3476 allows attackers to perform CSRF attacks that can make logged-in admins execute unwanted bulk actions.
Who is affected by CVE-2024-3476?
Logged-in administrators of websites using Side Menu Lite before version 4.2.1 are affected by CVE-2024-3476.
Is CVE-2024-3476 exploitable without user interaction?
CVE-2024-3476 can be exploited by attackers, but it requires the admin user to be tricked into performing actions on a malicious website.