Skip to content
OpenAdvisories

Product · themewant

RT Mega Menu – Mega Menu Builder for Elementor & Gutenberg

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.4
    CVE-2026-14855

    RT Mega Menu <= 1.5.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting via rtmega_update_menu_options AJAX Action

    The RT Mega Menu plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'css[left]' parameter in all versions up to, and including, 1.5.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated a…

    themewant RT Mega Menu – Mega Menu Builder for Elementor & Gutenberg Web / CMS
  • Medium 6.4
    CVE-2026-15650

    RT Mega Menu <= 1.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'pointer_menu_item' Block Attribute

    The RT Mega Menu – Mega Menu Builder for Elementor & Gutenberg plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'pointer_menu_item' Block Attribute in all versions up to, and including, 1.5.2 due to insufficient input sanitization and out…

    themewant RT Mega Menu – Mega Menu Builder for Elementor & Gutenberg Web / CMS