Sevenspark Ubermenu
2 CVEs affecting Sevenspark Ubermenu. Latest disclosed: 2024-06-22. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-3593 | High | 7.2 | 2024-06-22 | The UberMenu plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.8.3. This is due to missing or incorrect… |
CVE-2024-4710 | Medium | 6.4 | 2024-05-21 | The UberMenu plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's ubermenu-col, ubermenu_mobile_close_button, ubermenu_toggle, ub… |