Skip to content
OpenAdvisories

Product · sevenspark

UberMenu

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.2
    CVE-2024-3593

    UberMenu <= 3.8.3 - Cross-Site Request Forgery to Settings Reset

    The UberMenu plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.8.3. This is due to missing or incorrect nonce validation on the ubermenu_delete_all_item_settings and ubermenu_reset_settings functions. Thi…

    sevenspark UberMenu Web / CMS