CVE-2025-28057

owl-admin v3.2.2 to v4.10.2 is vulnerable to SQL Injection in /admin-api/system/adminmenus/saveorder...

Owl Admin 安全漏洞

Owl Admin is a fast and flexible backend framework from Owl Admin. A security vulnerability exists in Owl Admin v3.2.2 through v4.10.2, which stems from an SQL injection in /admin-api/system/adminmenus/saveorder...

Malicious code in qs-appbar-menus (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-2892 Malicious code in qs-appbar-menus (npm)

--- -= Per source details. Do not edit below this line.=-...

CVE-2025-30860

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Jory Hogeveen Off-Canvas Sidebars & Menus Slidebars off-canvas-sidebars allows DOM-Based XSS.This issue affects Off-Canvas Sidebars & Menus Slidebars: from n/a through = 0.5.8.2...

CVE-2025-23910

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in keighl Menus Plus+ menus-plus allows SQL Injection.This issue affects Menus Plus+: from n/a through = 1.9.6...

The vulnerability of the Monster Menus module in the Drupal CMS system allows a hacker to compromise the confidentiality and integrity of the protected information.

The vulnerability of the Monster Menus module in the Drupal CMS system is related to deficiencies in the authentication mechanism. Exploiting this vulnerability allows a malicious actor to disclose protected information and compromise the integrity of that information...

The vulnerability of the Monster Menus module in the Drupal CMS system allows a hacker to execute arbitrary code.

The vulnerability of the Monster Menus module in the Drupal CMS system is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

CVE-2025-23910

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in keighl Menus Plus+ menus-plus allows SQL Injection.This issue affects Menus Plus+: from n/a through = 1.9.6...

CVE-2025-23910

CVE-2025-23910 Affecting WordPress Menus Plus+ plugin (Menus Plus+) authenticated SQL Injection in 1.9.6 and earlier. Public details show improper neutralization of input in SQL commands enabling injection. Patch status in connected data is Unpatched; no exploit provided. Recommend monitoring for...

CVE-2025-23910 WordPress Menus Plus+ Plugin <= 1.9.6 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in keighl Menus Plus+ menus-plus allows SQL Injection.This issue affects Menus Plus+: from n/a through = 1.9.6...

WordPress plugin Menus Plus+ SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A SQL injection...

PT-2025-5189 · Unknown · Menus Plus+

Name of the Vulnerable Software and Affected Versions: Menus Plus+ versions 1.9.6 and earlier Description: The issue is related to improper neutralization of special elements used in an SQL command, which allows SQL Injection. This means that an attacker could potentially inject malicious SQL cod...

CVE-2024-13288

Deserialization of Untrusted Data vulnerability in Drupal Monster Menus allows Object Injection.This issue affects Monster Menus: from 0.0.0 before 9.3.4, from 9.4.0 before 9.4.2...

CVE-2024-13281

Incorrect Authorization vulnerability in Drupal Monster Menus allows Forceful Browsing.This issue affects Monster Menus: from 0.0.0 before 9.3.2...

CVE-2024-13288

The CVE-2024-13288 issue is a Deserialization of Untrusted Data vulnerability in Drupal Monster Menus. The connected PT-Security advisory confirms the vulnerability arises from deserializing untrusted data, allowing object injection and potential remote arbitrary code execution. Affected are Drup...

CVE-2024-13288 Monster Menus - Critical - Arbitrary PHP code execution - SA-CONTRIB-2024-052

Deserialization of Untrusted Data vulnerability in Drupal Monster Menus allows Object Injection.This issue affects Monster Menus: from 0.0.0 before 9.3.4, from 9.4.0 before 9.4.2...

CVE-2024-13288 Monster Menus - Critical - Arbitrary PHP code execution - SA-CONTRIB-2024-052

Deserialization of Untrusted Data vulnerability in Drupal Monster Menus allows Object Injection.This issue affects Monster Menus: from 0.0.0 before 9.3.4, from 9.4.0 before 9.4.2...

CVE-2024-13288 Monster Menus - Critical - Arbitrary PHP code execution - SA-CONTRIB-2024-052

Deserialization of Untrusted Data vulnerability in Drupal Monster Menus allows Object Injection.This issue affects Monster Menus: from 0.0.0 before 9.3.4, from 9.4.0 before 9.4.2...

CVE-2024-13281

CVE-2024-13281 affects Drupal Monster Menus prior to version 9.3.2. The root cause is an incorrect authorization check that enables forceful browsing, leading to an access bypass and potential information disclosure. The vulnerability is associated with the Monster Menus module (SA-CONTRIB-2024-0...