CVE-2026-13393

The ElementsKit Elementor Addons WordPress plugin before 3.10.01 does not sanitize or escape certain megamenu menu-item settings before storing them and outputting them on the front end, and does not require the unfilteredhtml capability to save them, allowing users with administrative capabiliti...

CVE-2026-13393 ElementsKit Lite < 3.10.01 - Subsite Administrator+ Stored XSS via Megamenu Menu-Item Settings (Multisite)

The ElementsKit Elementor Addons WordPress plugin before 3.10.01 does not sanitize or escape certain megamenu menu-item settings before storing them and outputting them on the front end, and does not require the unfilteredhtml capability to save them, allowing users with administrative capabiliti...

EUVD-2026-51434

The ElementsKit Elementor Addons WordPress plugin before 3.10.01 does not sanitize or escape certain megamenu menu-item settings before storing them and outputting them on the front end, and does not require the unfilteredhtml capability to save them, allowing users with administrative capabiliti...

CVE-2026-13393

The CVE-2026-13393 affects ElementsKit Elementor Addons for WordPress (before 3.10.01). The vulnerability arises from insufficient sanitization/escaping of certain megamenu menu-item settings, allowing stored cross-site scripting (XSS) without requiring unfiltered_html to save them. On multisite,...

EUVD-2017-9641

Malware in sbrugna...

EUVD-2024-35436

Malicious code in bioql PyPI...

EUVD-2024-51512

Malicious code in bioql PyPI...

CVE-2017-18525

The megamenu plugin before 2.4 for WordPress has XSS...

CVE-2024-13407

The Omnipress plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 1.5.4 via the megamenu block due to insufficient restrictions on which posts can be included. This makes it possible for authenticated attackers, with Contributor-level access and above,...

CVE-2025-0968

The ElementsKit Elementor addons plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.4.0 due to a missing capability checks on the getmegamenucontent function. This makes it possible for unauthenticated attackers to view any item created in...

WordPress ElementsKit Elementor addons plugin <= 3.4.0 - Unauthenticated Information Exposure via get_megamenu_content Function vulnerability

Unauthenticated Information Exposure via getmegamenucontent Function vulnerability discovered by stealthcopter in WordPress Plugin ElementsKit Elementor addons Lite versions = 3.4.0...

CVE-2024-35677

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in StylemixThemes MegaMenu allows PHP Local File Inclusion.This issue affects MegaMenu: from n/a through 2.3.12...

The vulnerability of the Megamenu Framework CMS system’s Drupal module, related to insufficient validation of input data, allows attackers to execute arbitrary code.

The vulnerability of the Megamenu Framework CMS system’s Drupal module is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

CVE-2024-13299

Vulnerability in Drupal Megamenu Framework.This issue affects Megamenu Framework:...

CVE-2024-13299 Megamenu Framework - Critical - Unsupported - SA-CONTRIB-2024-065

Vulnerability in Drupal Megamenu Framework.This issue affects Megamenu Framework:...

CVE-2024-13299 Megamenu Framework - Critical - Unsupported - SA-CONTRIB-2024-065

Vulnerability in Drupal Megamenu Framework.This issue affects Megamenu Framework:...

CVE-2024-13299

Summary: CVE-2024-13299 applies to the Drupal Megamenu Framework module. The issue is caused by insufficient input validation in the Megamenu Framework component, which can be exploited by a remote attacker to execute arbitrary code. What’s affected: Megamenu Framework module for Drupal (versions...

PT-2024-10138 · Drupal · Megamenu Framework

Name of the Vulnerable Software and Affected Versions: Megamenu Framework versions . Description: The issue is related to insufficient input validation in the Megamenu Framework module of the Drupal CMS, which can be exploited by a remote attacker to execute arbitrary code. Recommendations: For...

Drupal Megamenu Framework module * - Authenticated Other Vulnerability Type vulnerability

Authenticated Other Vulnerability Type vulnerability discovered by Drew Webber in WordPress Module Megamenu Framework versions...

CVE-2024-35677

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in StylemixThemes MegaMenu allows PHP Local File Inclusion.This issue affects MegaMenu: from n/a through 2.3.12...