कंडीशनल मेनू <= 1.2.6 - मेनू विकल्पों को अपडेट करने के लिए क्रॉस-साइट रिक्वेस्ट फोर्जरी

The primary impact of this XSRF vulnerability is the unauthorized modification of conditional menu assignments within a WordPress site. An attacker could craft a malicious link that, when clicked by an administrator, would silently alter these assignments. This could lead to unexpected behavior, redirect users to unintended pages, or even inject malicious content. The blast radius is limited to the scope of the Conditional Menus plugin and the privileges of the administrator who clicks the malicious link. While not directly leading to system compromise, it can be a stepping stone for further attacks if the menu assignments control critical site functionality.

WordPress sites utilizing the Conditional Menus plugin, particularly those with administrators who are not adequately trained in security best practices, are at risk. Shared hosting environments where multiple websites share the same server resources could also be affected if one site is compromised and used to launch attacks against others.

• wordpress / composer / npm:

grep -r 'save_options' /var/www/html/wp-content/plugins/conditional-menus/

• generic web:

curl -I https://example.com/wp-admin/admin-ajax.php?action=conditional_menus_save_options&... # Check for missing nonce

1. 2026-03-26Disclosure

   disclosure

1. आरक्षित2026-01-16
2. प्रकाशित2026-03-26
3. संशोधित2026-04-08
4. EPSS अद्यतन2026-04-03

The recommended mitigation is to immediately upgrade the Conditional Menus plugin to version 1.2.7 or later, which addresses the missing nonce validation. As a temporary workaround, consider implementing strict Content Security Policy (CSP) rules to restrict the origins from which the plugin can load resources. Additionally, educate administrators about the risks of clicking on suspicious links and the importance of verifying the source of any actions they perform within the WordPress dashboard. After upgrading, confirm the fix by attempting to trigger a menu assignment modification via a crafted XSRF request – it should be rejected.

सक्रिय इंस्टॉलेशन

60Kज्ञात

प्लगइन रेटिंग