CVE-2025-7014

Summary: CVE-2025-7014 describes a Session Fixation vulnerability in QR Menu Pro Smart Menu Systems’ Menu Panel, allowing Session Hijacking. Affects the Menu Panel up to version tied to the date 29012026 (presumably before that date). Multiple sources (NVD, Red Hat, CVE list, EUVD, ATT&CK referen...

CVE-2025-7013

The CVE-2025-7013 issue is an Authorization Bypass via a user-controlled key in the QR Menu Pro Smart Menu Systems Menu Panel. Documents confirm the affected component is the Menu Panel (versions up to 29012026). The root cause is improper authorization handling that permits exploitation of trust...