Malicious code in mega-pure-tool (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-15718 Malicious code in mega-pure-tool (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in mega-pure-gem (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-15717 Malicious code in mega-pure-gem (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in mega-pro-kit (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-15716 Malicious code in mega-pro-kit (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in mega-pro-box (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-15715 Malicious code in mega-pro-box (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in mega-lite-kit (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-15714 Malicious code in mega-lite-kit (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in mega-fast-sys (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-15713 Malicious code in mega-fast-sys (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in mega-clean-sys (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-15712 Malicious code in mega-clean-sys (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

WordPress RT Mega Menu plugin < 1.5.2 - Subscriber+ Stored XSS vulnerability

Subscriber+ Stored XSS vulnerability discovered by Shivamani Vastrala in WordPress Plugin RT Mega Menu – Mega Menu Builder for Elementor & Gutenberg versions 1.5.2...

WordPress Buttons Mega Pack Pro plugin <= 2.5 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Plugin Buttons Mega Pack Pro versions = 2.5...

CVE-2026-15385

The RT Mega Menu WordPress plugin before 1.5.2 does not perform a capability check on the AJAX action that saves mega-menu configuration and per-menu-item settings; its only gate is a nonce that any logged-in user can read from a standard admin page. A subscriber-level user can therefore enable t...

CVE-2026-11872

The Clever Mega Menu for Visual Composer WordPress plugin through 1.0.1 does not perform a nonce or capability check in an AJAX action that updates navigation menu item metadata, allowing any authenticated user, including Subscribers, to overwrite menu item content and settings that are rendered ...

EUVD-2026-51939

The Clever Mega Menu for Visual Composer WordPress plugin through 1.0.1 does not perform a nonce or capability check in an AJAX action that updates navigation menu item metadata, allowing any authenticated user, including Subscribers, to overwrite menu item content and settings that are rendered ...

CVE-2026-15385

The RT Mega Menu WordPress plugin (versions before 1.5.2 ) is vulnerable to Stored XSS due to a lack of capability checks on an AJAX action used to save mega-menu configurations and per-menu-item settings. While a nonce is present, it is accessible to any logged-in user. A user with subscriber-le...