CVE-2026-11872

The CVE-2026-11872 affects the Clever Mega Menu for Visual Composer WordPress plugin up to version 1.0.1. The root cause is a missing nonce or capability check in an AJAX action that updates navigation menu item metadata, enabling any authenticated user (including Subscribers) to overwrite menu i...