Medium 4.3
2025-04-12< 3.2.1
WordPress Mega Menu – QuadMenu <= 3.2.0 - Cross-Site Request Forgery to Limited User Meta Update
Minimum safe version
3.2.1
Update to 3.2.1 or later to address 5 fixable vulnerabilities
WordPress Mega Menu – QuadMenu <= 3.2.0 - Cross-Site Request Forgery to Limited User Meta Update
CVE-2021-4443
QuadMenu < 2.0.7 - Unauthenticated RCE via compiler_save
WordPress Mega Menu <= 2.0.6 - Arbitrary File Creation
WordPress QuadMenu plugin <= 2.0.6 - Remote Code Execution (RCE) vulnerability