CVE-2024-8434

CVE-2024-8434 affects the Easy Mega Menu Plugin for WordPress – ThemeHunk. A missing capability check on several AJAX-hooked functions allows authenticated users with subscriber-level access and above to perform actions such as updating plugin settings in all versions up to 1.0.9. The vulnerabili...

CVE-2025-30990

CVE-2025-30990 pertains to ThemeHunk WordPress plugin where Missing Authorization arises from misconfigured access control in ThemeHunk, affecting versions up to 1.1.1. The vulnerability enables an unauthorized actor to exploit access control, per the Red Hat advisory describing Missing Authoriza...