Known Vulnerabilities for Admin Menu by Admin Menu Project
Listed below are 1 of the newest known vulnerabilities associated with "Admin Menu" by "Admin Menu Project".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-12165 json | The Contest Gallery – Upload & Vote Photos, Media, Sell with PayPal & Stripe plugin for WordPress is vulnerable to Privileg... | Not Provided | 2026-06-17 | 2026-06-17 |
| CVE-2026-12137 json | The SysBasics Customize My Account for WooCommerce – Dashboard, Endpoints, Avatar & Menu Manager plugin for WordPress is vu... | Not Provided | 2026-06-18 | 2026-06-18 |
| CVE-2026-11775 json | The User Admin Simplifier plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and includi... | Not Provided | 2026-06-19 | 2026-06-22 |
| CVE-2026-11358 json | The Orbit Fox: Duplicate Page, Menu Icons, SVG Support, Cookie Notice, Custom Fonts & More plugin for WordPress is vulnerable... | Not Provided | 2026-06-18 | 2026-06-18 |
| CVE-2026-8685 json | The Infility Global plugin for WordPress is vulnerable to SQL Injection via the 'orderby' and 'order' parameters in all versi... | Not Provided | 2026-05-20 | 2026-05-20 |
| CVE-2025-26925 json | Cross-Site Request Forgery (CSRF) vulnerability in Required Admin Menu Manager allows Cross Site Request Forgery.This issue a... | Not Provided | 2025-02-26 | 2026-04-28 |
| CVE-2024-24876 json | Cross-Site Request Forgery (CSRF) vulnerability in Janis Elsts Admin Menu Editor.This issue affects Admin Menu Editor: from n... | Not Provided | 2024-02-21 | 2026-04-28 |
| CVE-2020-24316 json | WP Plugin Rednumber Admin Menu v1.1 and lower does not sanitize the value of the "role" GET parameter before echoing it back ... | 6.1 - MEDIUM | 2020-08-26 | 2020-10-20 |
Known Affected Configurations (CPE V2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Admin Menu Project | Admin Menu | 1.1 | |||
| Application | Admin Menu Project | Admin Menu | - |