WordPress Plugin Vulnerabilities

Simple Retail Menus 4.0.1 - includes/actions.php targetmenu Parameter SQL Injection

Description

The Simple Retail Menus WordPress plugin was affected by an includes/actions.php targetmenu Parameter SQL Injection security vulnerability.

Affects Plugins

Plugin icon
simple-retail-menus
Fixed in 4.1

Classification

Type
SQLI
OWASP top 10
A1: Injection
CWE
CWE-89

Miscellaneous

Verified
No
WPVDB ID
ef2d53bf-1275-4616-b22e-742c2a7844bb

Timeline

Publicly Published
2014-08-01 (about 11 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2015-05-15 (about 10 years ago)

Other

Published
Title
Published
2025-10-14
Title
Dynamically Display Posts <= 1.1 - Unauthenticated SQL Injection
Published
2019-05-20
Title
FV Flowplayer Video Player < 7.3.15.727 - SQL Injection
Published
2025-09-09
Title
Tutor LMS < 3.8.0 - Authenticated (Administrator+) SQL Injection
Published
2026-05-12
Title
Avada Builder < 3.15.2 - Unauthenticated SQL Injection via 'product_order' Parameter
Published
2026-03-23
Title
ElementInvader Addons for Elementor < 1.4.3 - Authenticated (Subscriber+) SQL Injection