Themeum Wp Mega Menu vulnerabilities

2 CVEs affecting Themeum Wp Mega Menu, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-92465, published 2026-09-16.

More from Themeum.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2024-54282, published 2024-12-13. High severity, CVSS 7.2. EPSS: 0.8% chance of exploitation in the next 30 days. Deserialization of Untrusted Data vulnerability in Themeum WP Mega Menu wp-megamenu allows Object Injection.This issue affects WP Mega Menu: from n/a through <= 1.4.2.
• CVE-2026-92465, published 2026-09-16. High severity, CVSS 7.6. EPSS: 0.4% chance of exploitation in the next 30 days. Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Themeum WP Mega Menu allows Blind SQL Injection. This issue affects WP Mega Menu: from n/a…