Approved changes feed: RSS · Atom

cpe:2.3:a:notfound:hero_mega_menu_-_responsive_wordpress_menu_plugin:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorNotfound (54c49018-a4b6-55fd-8fba-3adf0bd40c8d)
ProductHero Mega Menu Responsive Wordpress Menu Plugin (e8ad2853-bcfd-51d3-9a82-bd8c9d8f0bce)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-49333 vulnerable 2026-06-08 06:50:13.484691 WordPress Hero Menu plugin <= 1.16.5 - SQL Injection vulnerability
HIGH (8.5)
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in NotFound Hero Mega Menu - Responsive WordPress Menu Plugin allows SQL Injection. This issue affects Hero Mega Menu - Responsive WordPress Menu Plugin: from n/a through 1.16.5.
Published: 2025-01-21T13:40:32.700Z
Updated: 2026-04-28T16:10:25.674Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-49303 vulnerable 2026-06-08 06:50:13.411875 WordPress Hero Menu plugin <= 1.16.5 - SQL Injection vulnerability
HIGH (8.5)
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in NotFound Hero Mega Menu - Responsive WordPress Menu Plugin allows SQL Injection. This issue affects Hero Mega Menu - Responsive WordPress Menu Plugin: from n/a through 1.16.5.
Published: 2025-01-21T13:40:32.562Z
Updated: 2026-04-28T16:10:24.915Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-49300 vulnerable 2026-06-08 06:50:13.408426 WordPress Hero Menu plugin <= 1.16.5 - Cross Site Scripting (XSS) vulnerability
HIGH (7.1)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound Hero Mega Menu - Responsive WordPress Menu Plugin allows Reflected XSS. This issue affects Hero Mega Menu - Responsive WordPress Menu Plugin: from n/a through 1.16.5.
Published: 2025-01-21T13:40:32.331Z
Updated: 2026-05-05T14:45:15.652Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.