CVE-2021-4443 — WordPress Mega Menu <= 2.0.6 - Arbitrary File Creation
The WordPress Mega Menu plugin for WordPress is vulnerable to Arbitrary File Creation in versions up to, and including, 2.0.6 via the compiler_save AJAX action. This makes it po…
Published: 2024-10-16 · CVSS: 9.8 · CVSS 3.1
The WordPress Mega Menu plugin for WordPress is vulnerable to Arbitrary File Creation in versions up to, and including, 2.0.6 via the compiler_save AJAX action. This makes it possible for unauthenticated attackers to create arbitrary PHP files that can be used to execute malicious code.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7