themeum WP Mega Menu vulnerabilities

Latest themeum WP Mega Menu CVEs

Newest publication first

1. CVE-2026-92465 WordPress WP Mega Menu plugin <= 1.4.2 - SQL Injection vulnerability

   Published 2026-09-16

   High·CVSS 7.6 EPSS 0.38%

   Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Themeum WP Mega Menu allows Blind SQL Injection. This issue affects WP Mega Menu: from n/a through 1.4.2.

2. CVE-2024-54282 WordPress WP Mega Menu plugin <= 1.4.2 - PHP Object Injection vulnerability

   Published 2024-12-13

   High·CVSS 7.2 EPSS 0.83%

   Deserialization of Untrusted Data vulnerability in Themeum WP Mega Menu wp-megamenu allows Object Injection.This issue affects WP Mega Menu: from n/a through <= 1.4.2.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.