CVE-2022-25602: Expresstech Responsive Menu

High severity, CVSS 8.8. EPSS: 1.3% chance of exploitation in the next 30 days.

Nonce token leak vulnerability leading to arbitrary file upload, theme deletion, plugin settings change discovered in Responsive Menu WordPress plugin (versions <= 4.1.7).

Affected products

• Expresstech Responsive Menu: up to and including 4.1.7

Published 2022-03-18. Last modified 2026-06-17.