CVE-2024-49300

CVE-2024-49300 is a Reflected XSS in the WordPress plugin Hero Mega Menu - Responsive WordPress Menu Plugin, affecting versions up to 1.16.5. The connected Red Hat entry and PT/ENISA notes indicate the vulnerability exists; a public patch/remediation is not detailed in the provided docs, but one ...

CVE-2024-49300 WordPress Hero Menu plugin <= 1.16.5 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in NotFound Hero Mega Menu - Responsive WordPress Menu Plugin allows Reflected XSS. This issue affects Hero Mega Menu - Responsive WordPress Menu Plugin: from n/a through 1.16.5...

WordPress Hero Menu plugin <= 1.16.5 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Bonds Patchstack Alliance in WordPress Plugin Hero Mega Menu - Responsive WordPress Menu Plugin versions = 1.16.5...