58 matches found
CVE-2024-35677
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in StylemixThemes MegaMenu allows PHP Local File Inclusion.This issue affects MegaMenu: from n/a through 2.3.12...
CVE-2024-35677
CVE-2024-35677 is an authenticated/unaffected? No; the MegaMenu vulnerability is a Path Traversal leading to PHP Local File Inclusion in StylemixThemes MegaMenu. The entry indicates affected software MegaMenu up to version 2.3.12 and a patch has been released (Patch Status: Patched). CVSSv3.1 val...
CVE-2024-35677 WordPress MegaMenu plugin <= 2.3.12 - Unauthenticated Local File Inclusion vulnerability
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in StylemixThemes MegaMenu allows PHP Local File Inclusion.This issue affects MegaMenu: from n/a through 2.3.12...
CVE-2024-35677 WordPress MegaMenu plugin <= 2.3.12 - Unauthenticated Local File Inclusion vulnerability
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in StylemixThemes MegaMenu allows PHP Local File Inclusion.This issue affects MegaMenu: from n/a through 2.3.12...
CVE-2024-35677: Improper Limitation of a Pathname to a Restricted Directory
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in StylemixThemes MegaMenu allows PHP Local File Inclusion.This issue affects MegaMenu: from n/a through 2.3.12...
WordPress plugin MegaMenu path traversal vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A path traversal...
WordPress MegaMenu plugin <= 2.3.12 - Unauthenticated Local File Inclusion vulnerability
Unauthenticated Local File Inclusion vulnerability discovered by Rafie Muhammad Patchstack in WordPress Plugin MegaMenu versions = 2.3.12...
WordPress MegaMenu Plugin <= 2.3.12 is vulnerable to Local File Inclusion
Software MegaMenu Type Plugin Vulnerable versions = 2.3.12 Fixed in 2.3.13 OWASP Top 10 A3: Injection Classification Local File Inclusion CVE CVE-2024-35677 Patch priority High CVSS severity High 9 Developer Claim ownership PSID 866b59909ea3 Credits Rafie Muhammad Patchstack Required privilege...
CVE-2024-28003
Missing Authorization vulnerability in Megamenu Max Mega Menu.This issue affects Max Mega Menu: from n/a through 3.3...
CVE-2024-28003 WordPress Max Mega Menu plugin <= 3.3 - Broken Access Control vulnerability
Missing Authorization vulnerability in Megamenu Max Mega Menu.This issue affects Max Mega Menu: from n/a through 3.3...
CVE-2024-28003: Missing Authorization
Missing Authorization vulnerability in Megamenu Max Mega Menu.This issue affects Max Mega Menu: from n/a through 3.3...
WordPress megamenu plugin cross-site scripting vulnerability
WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. megamenu is a menu management plugin used in it. A cross-site scripting vulnerability exists in the WordPress megamenu plugin. An...
CVE-2017-18525
The megamenu plugin before 2.4 for WordPress has XSS...
CVE-2017-18525
The megamenu plugin before 2.4 for WordPress has XSS...
Cross site scripting
The megamenu plugin before 2.4 for WordPress has XSS...
CVE-2017-18525
The megamenu plugin before 2.4 for WordPress has XSS...
CVE-2017-18525
The CVE-2017-18525 entry concerns the WordPress Max Mega Menu plugin, with an XSS vulnerability affecting versions before 2.4. The issue is a cross-site scripting flaw in the megamenu plugin (WordPress), enabling an attacker to execute client-side code. The available connected documents confirm v...