Skip to content
OpenAdvisories
Medium · 4.3 CVE-2026-32456 EUVD-2026-12011GHSA-w87c-f5r3-xjm3

WordPress Admin Menu Editor plugin <= 1.14.1 - Cross Site Request Forgery (CSRF) vulnerability

Published Mar 13, 2026 · Updated Apr 29, 2026 · Assigned by Patchstack

Vendor: Janis Elsts Product: Admin Menu Editor

Description

Cross-Site Request Forgery (CSRF) vulnerability in Janis Elsts Admin Menu Editor admin-menu-editor allows Cross Site Request Forgery.This issue affects Admin Menu Editor: from n/a through <= 1.14.1.

Affected products

VendorProductAffectedFixed
Janis Elsts Admin Menu Editor ≤ 1.14.1 —

References