CVE-2022-2275: Wp Edit Menu Project Wp Edit Menu

Medium severity, CVSS 4.3. EPSS: 0.3% chance of exploitation in the next 30 days.

The WP Edit Menu WordPress plugin before 1.5.0 does not have CSRF in an AJAX action, which could allow attackers to make a logged in admin delete arbitrary posts/pages from the blog via a CSRF attack

Affected products

• Wp Edit Menu Project Wp Edit Menu: before 1.5.0 (fixed in 1.5.0)

Published 2022-08-22. Last modified 2026-06-17.