CVE-2022-25602

🗓️ 18 Mar 2022 18:00:26Reported by PatchstackType

Nonce token leak vulnerability in Responsive Menu WordPress plugi

Reporter	Title	Published	Views	Family All 10
CNNVD	WordPress plugin Responsive Menu 代码问题漏洞	18 Mar 202200:00	–	cnnvd
Cvelist	CVE-2022-25602 WordPress Responsive Menu plugin <= 4.1.7 - Nonce token leak leading to arbitrary file upload, theme deletion, plugin settings change vulnerability	18 Mar 202218:00	–	cvelist
EUVD	EUVD-2022-30262	3 Oct 202520:07	–	euvd
NVD	CVE-2022-25602	18 Mar 202218:15	–	nvd
OpenVAS	WordPress Responsive Menu Plugin < 4.1.8 Information Disclosure Vulnerability	6 May 202200:00	–	openvas
OSV	CVE-2022-25602	18 Mar 202218:15	–	osv
Patchstack	WordPress Responsive Menu plugin <= 4.1.7 - Nonce token leak leading to arbitrary file upload, theme deletion, plugin settings change vulnerability	16 Mar 202200:00	–	patchstack
Prion	Design/Logic Flaw	18 Mar 202218:15	–	prion
Vulnrichment	CVE-2022-25602 WordPress Responsive Menu plugin <= 4.1.7 - Nonce token leak leading to arbitrary file upload, theme deletion, plugin settings change vulnerability	18 Mar 202218:00	–	vulnrichment
WPVulnDB	Responsive Menu < 4.1.8 - Subscriber+ Arbitrary File Upload / Theme Deletion / Plugin Settings Update	16 Mar 202200:00	–	wpvulndb

NVD

Vulners

Node

expresstech responsive_menuRange≤4.1.7wordpress

[
  {
    "product": "Responsive Menu (WordPress plugin)",
    "vendor": "ExpressTech",
    "versions": [
      {
        "lessThanOrEqual": "4.1.7",
        "status": "affected",
        "version": "<= 4.1.7",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
patchstack	www.patchstack.com/database/vulnerability/responsive-menu/wordpress-responsive-menu-plugin-4-1-7-nonce-token-leak-leading-to-arbitrary-file-upload-theme-deletion-plugin-settings-change-vulnerability
wordpress	www.wordpress.org/plugins/responsive-menu/

17 Jun 2026 04:33Current

8.6High risk

Vulners AI Score8.6

CVSS 26.5

CVSS 3.18.3 - 8.8

EPSS0.01262

SSVC