High severity8.3NVD Advisory· Published Mar 18, 2022· Updated Jun 17, 2026

CVE-2022-25602

Description

Nonce token leak vulnerability leading to arbitrary file upload, theme deletion, plugin settings change discovered in Responsive Menu WordPress plugin (versions <= 4.1.7).

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

WordPress/Eds Responsive Menullm-fuzzy
Range: <=4.1.7
Package: https://wordpress.org/plugins/eds-responsive-menu
ExpressTech/Responsive Menu (WordPress plugin)v5
Range: <= 4.1.7

Patches

Vulnerability mechanics

References

patchstack.com/database/vulnerability/responsive-menu/wordpress-responsive-menu-plugin-4-1-7-nonce-token-leak-leading-to-arbitrary-file-upload-theme-deletion-plugin-settings-change-vulnerabilitynvdThird Party Advisory
wordpress.org/plugins/responsive-menu/nvdProductRelease Notes

News mentions

No linked articles in our index yet.

cvss	0.540
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000