Vulnerability in Clever Mega Menu For Visual Composer

CVE-2026-11872

The Clever Mega Menu for Visual Composer WordPress plugin through 1.0.1 does not perform a nonce or capability check in an AJAX action that updates navigation menu item metadata, allowing any authenticated user, including Subscribers, to o…

Affected products

  • Unknown Clever Mega Menu For Visual Composer — versions 0

References