Description
WordPress Plugin Admin Menu Tree Page View is prone to multiple vulnerabilities, including cross-site request forgery and privilege escalation vulnerabilities. Exploiting these issues could allow an attacker to perform certain administrative actions and gain unauthorized access to the affected application, or to create arbitrary posts. WordPress Plugin Admin Menu Tree Page View version 2.6.9 is vulnerable; prior versions may also be affected.
Remediation
Update to plugin version 2.7 or latest
References
http://pvagenas.com/vulnerabilities/admin-menu-tree-page-view-csrf-privilege-escalation/
https://pvagenas.com/vulnerabilities/admin-menu-tree-page-view-csrf-privilege-escalation-2/
https://www.exploit-db.com/exploits/43486/
https://plugins.svn.wordpress.org/admin-menu-tree-page-view/trunk/readme.txt
Related Vulnerabilities
Oracle JRE CVE-2013-2444 Vulnerability (CVE-2013-2444)
Apache Tomcat CVE-2026-24733 Vulnerability (CVE-2026-24733)
Joomla! Core 3.x.x Cross-Site Request Forgery (3.0.0 - 3.9.26)
MySQL CVE-2012-5096 Vulnerability (CVE-2012-5096)
Moodle Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2016-2158)