Critical severity9.8NVD Advisory· Published Oct 16, 2024· Updated Apr 15, 2026

CVE-2021-4443

Description

The WordPress Mega Menu plugin for WordPress is vulnerable to Arbitrary File Creation in versions up to, and including, 2.0.6 via the compiler_save AJAX action. This makes it possible for unauthenticated attackers to create arbitrary PHP files that can be used to execute malicious code.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

WordPress/Wordpress Mega Menuinferred2 versions
<=2.0.6+ 1 more
- (no CPE)range: <=2.0.6
- (no CPE)range: <=2.0.6
Package: https://wordpress.org/plugins/wordpress-mega-menu

Patches

Vulnerability mechanics

References

sh3llcon.org/la-debilidad-de-wordpress/nvd
www.acunetix.com/vulnerabilities/web/wordpress-plugin-wordpress-mega-menu-quadmenu-remote-code-execution-2-0-6/nvd
www.wordfence.com/threat-intel/vulnerabilities/id/04003542-fd62-4587-9834-70e7fe8f08efnvd

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000