Vulnerabilities CVE-2026-11872

CVE-2026-11872

None

Open

TLP:CLEAR

Clever Mega Menu for Visual Composer <= 1.0.1 - Subscriber+ Menu Item Meta Update via save_clever_menu_item

NVD CVE.org

AI Analysis

No AI analysis yet.

Description

The Clever Mega Menu for Visual Composer WordPress plugin through 1.0.1 does not perform a nonce or capability check in an AJAX action that updates navigation menu item metadata, allowing any authenticated user, including Subscribers, to overwrite menu item content and settings that are rendered in the site's public navigation.

Details

EPSS Score ⓘ: 0.19%

8.3th percentile
Confidence: 90%
Published: Aug 2, 2026
Last Modified: Aug 5, 2026

Notes

No notes yet. Click "Add Note" to create the first analysis note.

Opinions

No opinions yet. Be the first to assess this intelligence.