Skip to content
OpenAdvisories

Vendor

takanakui

2 known vulnerabilities.

Products

WP Mobile Menu – The Mobile-Friendly Responsive Menu 2
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.3
    CVE-2024-2508

    WP Mobile Menu <= 2.8.4.4 - Missing Authorization to _mobmenu_icon Post Meta Modification

    The WP Mobile Menu plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the save_menu_item_icon function in all versions up to, and including, 2.8.4.4. This makes it possible for unauthenticated attacker…

    takanakui WP Mobile Menu – The Mobile-Friendly Responsive Menu Web / CMS
  • Medium 5.4
    CVE-2024-3987

    WP Mobile Menu – The Mobile-Friendly Responsive Menu <= 2.8.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Alt

    The WP Mobile Menu – The Mobile-Friendly Responsive Menu plugin for WordPress is vulnerable to Stored Cross-Site Scripting via image alt text in all versions up to, and including, 2.8.4.2 due to insufficient input sanitization and output escaping. This makes …

    takanakui WP Mobile Menu – The Mobile-Friendly Responsive Menu Web / CMS