Exploit Title: WordPress Networker theme <= 1.1.9 - Improper Access Control Allowing Unauthenticated Modification of Display location of any menu Exploit Author: Muhammad Zeeshan (Xib3rR4dAr) Date: January 26, 2024 Theme Link: Link Version: 1.1.9 (latest version at time of vulnerability discovery) Tested on: Wordpress 6.4.3 Vulnerable Endpoint: /wp-admin/admin-ajax.php?action=csco_reload_menu Vulnerable File: networker/inc/mega-menu.php#L86 CVE: Not assigned yet Fix Remove the following line from line 86 of :