Admin Menu Editor Pro 2.35 - 2.36 - Backdoored Software
criticalThe Admin Menu Editor Pro plugin for WordPress contains a backdoor in versions 2.35 to 2.36. This is due to their infrastructure getting compromised. This makes it possible for unauthenticated attackers to gain backdoored access to sites running the software.
- CVSS:
- 9.8 (Wordfence)
- Affected:
- 2.35 – 2.36
- Fix:
- No patched version reported
- Disclosed:
- Sep 15, 2026