CVE-2024-12773: Pulseextensions Altra Side Menu

High severity, CVSS 7.2. EPSS: 0.6% chance of exploitation in the next 30 days.

The Altra Side Menu WordPress plugin through 2.0 does not sanitize and escape a parameter before using it in a SQL statement, allowing admins to perform SQL injection attacks

Affected products

• Pulseextensions Altra Side Menu: up to and including 2.0

Published 2025-01-27. Last modified 2026-06-17.