quadlayers Vulnerabilities and Affected Products
Vulnerabilities associated with WordPress Mega Menu plugin for WordPress.
Products
Clear product- Checkout Field Manager (Checkout Manager) for WooCommerce2 vulnerabilities
- Perfect Brands for WooCommerce2 vulnerabilities
- Perfect Brands for WooCommerce (WordPress plugin)2 vulnerabilities
- QuadMenu – Mega Menu2 vulnerabilities
- Search Exclude2 vulnerabilities
- AI Copilot1 vulnerability
- checkout_manager1 vulnerability
- QuadLayers TikTok Feed1 vulnerability
- Social Feed Gallery1 vulnerability
- WooCommerce Checkout Manager1 vulnerability
- WordPress Mega Menu plugin for WordPress1 vulnerability
- wordpress_mega_menu-quadmenu1 vulnerability
- WP Social Feed Gallery1 vulnerability
- wp_social_feed_gallery1 vulnerability
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2021-4443CRITICAL | WordPress Mega Menu <= 2.0.6 - Arbitrary File CreationThe WordPress Mega Menu plugin for WordPress is vulnerable to Arbitrary File Creation in versions up to, and including, 2.0.6 via the compiler_save AJAX action. This makes it possible for unauthenticated attackers to create arbitrary PHP files that can be used to execute malicious code. CWE-434Oct 16, 2024 | CVSS9.8v3.1 | EPSS0.674% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |