Themehunk Mega Menu vulnerabilities
2 vulnerabilities
Known vulnerabilities in Themehunk Mega Menu, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
MediumCVE-2025-30990themehunk · mega_menu +2 moreWordPress ThemeHunk plugin <= 1.2.0 - Broken Access Control vulnerabilityMissing Authorization vulnerability in ThemeHunk ThemeHunk themehunk-megamenu-plus allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ThemeHunk: from n/a through <= 1.2.0.EPSS0.25%MediumCVE-2024-8434themehunk · easy mega menu for wordpress – themehunk +2 moreEasy Mega Menu Plugin for WordPress – ThemeHunk <= 1.0.9 - Missing Authorization to Authenticated (Subscriber+) Settings UpdatesThe Easy Mega Menu Plugin for WordPress – ThemeHunk plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on several functions hooked via AJAX in all versions up to, and including, 1.0.9. This makes it possible for authenticated attackers, with subscriber-level access and above, to perform actions like updating plugin settings.EPSS0.35%