Shiftnav Responsive Mobile Menu Vulnerabilities

The ShiftNav – Responsive Mobile Menu plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 1.8 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web s...

CVSS:

6.4

Affected:

up to 1.8

Fixed in:

1.8.1

Disclosed:

Jun 5, 2025

CVE-2025-49243 on NVD →

The ShiftNav – Responsive Mobile Menu plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcodes in versions up to, and including, 1.7.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers with cont...

CVSS:

5.5

Affected:

up to 1.7.1

Fixed in:

1.7.2

Disclosed:

Dec 28, 2022

CVE-2022-4627 on NVD →