VYPR

Wordpress Mega Menu

by WordPress

CVEs (1)

  • CVE-2021-4443CriOct 16, 2024
    risk 0.64cvss 9.8epss 0.01

    The WordPress Mega Menu plugin for WordPress is vulnerable to Arbitrary File Creation in versions up to, and including, 2.0.6 via the compiler_save AJAX action. This makes it possible for unauthenticated attackers to create arbitrary PHP files that can be used to execute…