Description
The WordPress Mega Menu plugin for WordPress is vulnerable to Arbitrary File Creation in versions up to, and including, 2.0.6 via the compiler_save AJAX action. This makes it possible for unauthenticated attackers to create arbitrary PHP files that can be used to execute malicious code.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| quadlayers | QuadMenu – Mega Menu | ≤ 2.0.6 | — |