Approved changes feed: RSS · Atom

cpe:2.3:a:quadlayers:wordpress_mega_menu-quadmenu:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorQuadlayers (e3284009-1c72-56ca-8110-e890105dd03b)
ProductWordpress Mega Menu Quadmenu (7bcfae53-f1df-56db-be3e-0cfd8bc29f29)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-4443 vulnerable 2026-06-08 05:38:09.455315 WordPress Mega Menu <= 2.0.6 - Arbitrary File Creation
CRITICAL (9.8)
The WordPress Mega Menu plugin for WordPress is vulnerable to Arbitrary File Creation in versions up to, and including, 2.0.6 via the compiler_save AJAX action. This makes it possible for unauthenticated attackers to create arbitrary PHP files that can be used to execute malicious code.
Published: 2024-10-16T06:43:23.798Z
Updated: 2026-04-08T16:33:03.764Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.