https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T10:56:09.854130+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-348670 EUVD-2026-348670 2026-10-07T10:56:09.907199+00:00 EUVD-2026-348670 https://cve.radiocsirt.org/vuln/fkie_cve-2026-11872 fkie_cve-2026-11872 2026-10-07T10:56:09.907269+00:00

The Clever Mega Menu for Visual Composer WordPress plugin through 1.0.1 does not perform a nonce or capability check in an AJAX action that updates navigation menu item metadata, allowing any authenticated user, including Subscribers, to overwrite menu item content and settings that are rendered in the site's public navigation.

 https://cve.radiocsirt.org/vuln/ghsa-m349-rc55-q5w8 GHSA-m349-rc55-q5w8 2026-10-07T10:56:09.907306+00:00

The Clever Mega Menu for Visual Composer WordPress plugin through 1.0.1 does not perform a nonce or capability check in an AJAX action that updates navigation menu item metadata, allowing any authenticated user, including Subscribers, to overwrite menu item content and settings that are rendered in the site's public navigation.