Accesspressthemes

Ap Mega Menu

2 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
6.1

CVE-2022-0628

Exploit
  • EPSS 0.21%
  • Published 21.03.2022 19:15:11
  • Last modified 21.11.2024 06:39:04

The Mega Menu WordPress plugin before 3.0.8 does not sanitize and escape the _wpnonce parameter before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting.

9.8

CVE-2021-24867

Exploit
  • EPSS 6.69%
  • Published 21.02.2022 11:15:08
  • Last modified 21.11.2024 05:53:55

Numerous Plugins and Themes from the AccessPress Themes (aka Access Keys) vendor are backdoored due to their website being compromised. Only plugins and themes downloaded via the vendor website are affected, and those hosted on wordpress.org are not....