Themehunk Megamenu Plus Vulnerabilities

The Easy Mega Menu Plugin for WordPress – ThemeHunk plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in all versions up to, and including, 1.2.0. This makes it possible for authenticated attackers, with Subscriber-level access and above, to perform an unauthorize...

CVSS:

4.3

Affected:

up to 1.2.0

Fixed in:

1.2.1

Disclosed:

Jun 5, 2025

CVE-2025-30990 on NVD →

The Easy Mega Menu Plugin for WordPress – ThemeHunk plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘themehunk_megamenu_bg_image' parameter in all versions up to, and including, 1.1.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers...

CVSS:

6.4

Affected:

up to 1.1.0

Fixed in:

1.1.1

Disclosed:

Oct 7, 2024

CVE-2024-8433 on NVD →

The Easy Mega Menu Plugin for WordPress – ThemeHunk plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on several functions hooked via AJAX in all versions up to, and including, 1.0.9. This makes it possible for authenticated attackers, with subscriber-level access and above, to...

CVSS:

4.3

Affected:

up to 1.0.9

Fixed in:

1.1.0

Disclosed:

Sep 24, 2024

CVE-2024-8434 on NVD →