Critical · 9.8 CVE-2024-52414 EUVD-2024-45901GHSA-pw66-2xmf-22rc

WordPress WDES Responsive Mobile Menu plugin <= 5.3.18 - PHP Object Injection vulnerability

Published Nov 16, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: Anthony Carbon Product: WDES Responsive Mobile Menu

Description

Deserialization of Untrusted Data vulnerability in Anthony Carbon WDES Responsive Mobile Menu wdes-responsive-mobile-menu allows Object Injection.This issue affects WDES Responsive Mobile Menu: from n/a through <= 5.3.18.

Affected products

Vendor	Product	Affected	Fixed
Anthony Carbon	WDES Responsive Mobile Menu	≤ 5.3.18	—

References

https://patchstack.com/database/Wordpress/Plugin/wdes-responsive-mobile-menu/vulnerability/wordpress-wdes-responsive-mobile-menu-plugin-5-3-18-php-object-injection-vulnerability?_s_id=cve vdb-entry