The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
The If Menu plugin for WordPress is vulnerable to unauthorized modification of the plugin's license key due to a missing capability check on the 'actions' function in versions up to, and including, 0.19.1. This makes it possible for unauthenticated attackers to modify delete or modify the license key.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| If Menu Plugin | — | Update if-menu plugin to version 0.19.2, or a newer patched version | May 15, 2025 | Dec 6, 2024 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub