CVE-2026-92465

HIGHCVSS 7.6

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Themeum WP Mega Menu allows Blind SQL Injection. This issue affects WP Mega Menu: from n/a through 1.4.2.

Timeline

Published:September 16th, 2026 12:17 PM

Last modified:September 23rd, 2026 11:10 AM

CVSS Scoring

CVSS v3: 7.6 (HIGH)

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:L

Weaknesses (CWE)

CWE-89

References & Reports

Advisories, patches, and third-party reports

https://patchstack.com/database/wordpress/plugin/wp-megamenu/vulnerability/wordpress-wp-mega-menu-plugin-1-4-2-sql-injection-vulnerability?_s_id=cve

Source: NIST NVD · Data may lag official sources by up to one minute