WordPress plugin
Max Mega Menu security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 2 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
2Known vulnerabilities
- Critical0
- High0
- Medium2
- Low0
All Max Mega Menu vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| Medium4.3 | Missing Authorization ≤3.3Update to 3.3.1 | CVE-2024-28003 | |
| Medium6.1 | Authenticated Cross-Site Scripting ≤2.3.8Update to 2.4 | CVE-2017-18525 |
- Medium4.3Missing Authorization
≤3.3Update to 3.3.1
- Medium6.1Authenticated Cross-Site Scripting
≤2.3.8Update to 2.4
Max Mega Menu: common questions
Does Max Mega Menu have known vulnerabilities?
Yes. VulnCrest Radar lists 2 known vulnerabilities in Max Mega Menu: 2 medium. None are known to affect version null.
How do I check which version of Max Mega Menu I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent Max Mega Menu vulnerability?
CVE-2024-28003, published Mar 26, 2024: Max Mega Menu <= 3.3. - Missing Authorization. Severity: Medium (CVSS 4.3).
Is any Max Mega Menu vulnerability listed in CISA KEV?
No. None of the known Max Mega Menu vulnerabilities is currently listed in the CISA KEV catalog.