Medium · 6.5 CVE-2026-59559 EUVD-2026-49226GHSA-wxmx-p29w-8898

WordPress RT Mega Menu – Mega Menu Builder for Elementor & Gutenberg plugin <= 1.5.1 - Cross Site Scripting (XSS) vulnerability

Published Jul 27, 2026 · Updated Jul 27, 2026 · Assigned by Patchstack

Description

Subscriber Cross Site Scripting (XSS) in RT Mega Menu – Mega Menu Builder for Elementor & Gutenberg <= 1.5.1 versions.

Vendor	Product	Affected	Fixed
themewant	RT Mega Menu – Mega Menu Builder for Elementor & Gutenberg	≤ 1.5.1	—