Skip to content
OpenAdvisories

Vendor

themewant

9 known vulnerabilities.

Products

Easy Hotel Booking 2 RT Mega Menu – Mega Menu Builder for Elementor & Gutenberg 2 Easy Elements for Elementor – Addons & Website Templates 2 RT Mega Menu – Mega Menu Builder for Elementor & Gutenberg 2 Easy Elements for Elementor – Addons & Website Templates 1
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • Medium 6.4
    CVE-2026-14855

    RT Mega Menu <= 1.5.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting via rtmega_update_menu_options AJAX Action

    The RT Mega Menu plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'css[left]' parameter in all versions up to, and including, 1.5.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated a…

    themewant RT Mega Menu – Mega Menu Builder for Elementor & Gutenberg Web / CMS
  • Medium 6.4
    CVE-2026-15650

    RT Mega Menu <= 1.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'pointer_menu_item' Block Attribute

    The RT Mega Menu – Mega Menu Builder for Elementor & Gutenberg plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'pointer_menu_item' Block Attribute in all versions up to, and including, 1.5.2 due to insufficient input sanitization and out…

    themewant RT Mega Menu – Mega Menu Builder for Elementor & Gutenberg Web / CMS
  • Medium 6.5
    CVE-2026-65433

    WordPress RT Mega Menu – Mega Menu Builder for Elementor & Gutenberg plugin <= 1.5.1 - Broken Access Control vulnerability

    Subscriber Broken Access Control in RT Mega Menu – Mega Menu Builder for Elementor &amp; Gutenberg <= 1.5.1 versions.

    themewant RT Mega Menu – Mega Menu Builder for Elementor &amp; Gutenberg
  • Medium 6.5
    CVE-2026-59559

    WordPress RT Mega Menu – Mega Menu Builder for Elementor & Gutenberg plugin <= 1.5.1 - Cross Site Scripting (XSS) vulnerability

    Subscriber Cross Site Scripting (XSS) in RT Mega Menu – Mega Menu Builder for Elementor &amp; Gutenberg <= 1.5.1 versions.

    themewant RT Mega Menu – Mega Menu Builder for Elementor &amp; Gutenberg
  • Medium 6.5
    CVE-2025-68005

    WordPress Easy Hotel Booking plugin <= 1.9.2 - Broken Access Control vulnerability

    Missing Authorization vulnerability in themewant Easy Hotel Booking easy-hotel allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Easy Hotel Booking: from n/a through <= 1.9.2.

    themewant Easy Hotel Booking
  • Medium 6.5
    CVE-2025-57938

    WordPress Easy Hotel Booking plugin <= 1.9.0 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in themewant Easy Hotel Booking easy-hotel allows DOM-Based XSS.This issue affects Easy Hotel Booking: from n/a through <= 1.9.0.

    themewant Easy Hotel Booking