High · 7.6 CVE-2026-92465 EUVD-2026-80675GHSA-7x9r-4mwg-89hw

WordPress WP Mega Menu plugin <= 1.4.2 - SQL Injection vulnerability

Published Sep 16, 2026 · Updated Sep 16, 2026 · Assigned by Patchstack

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Themeum WP Mega Menu allows Blind SQL Injection.

This issue affects WP Mega Menu: from n/a through 1.4.2.

Affected products

Vendor	Product	Affected	Fixed
Themeum	WP Mega Menu	≤ 1.4.2	—

References

https://patchstack.com/database/wordpress/plugin/wp-megamenu/vulnerability/wordpress-wp-mega-menu-plugin-1-4-2-sql-injection-vulnerability?_s_id=cve vdb-entry