Threat Entry Updated 2024-12-17

CVE-2024-8434 - Mega Menu Plugin

The Easy Mega Menu Plugin for WordPress – ThemeHunk plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on several functions hooked via AJAX in all versions up to, and including, 1.0.9. This makes it possible for authenticated attackers, with subscriber-level access and above, to perform actions like updating plugin settings.

PLUGIN Mega Menu

CVE-2024-8434

MEDIUM CVSS 4.3 2024-09-25

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2024-11-21

CVE-2022-0628 - Mega Menu Plugin

The Mega Menu WordPress plugin before 3.0.8 does not sanitize and escape the _wpnonce parameter before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting.

PLUGIN Mega Menu

CVE-2022-0628

MEDIUM CVSS 6.1 2022-03-21

Risk Score

Open Full Technical Breakdown