Really Simple Security logo

Log out
Get PRO

Latest

Input validation vulnerability in Side Menu Lite – add sticky fixed buttons 4.0

  • Severity: medium-risk
  • Status: Fixed
  • Publication: March 8, 2023

The Side Menu Lite plugin for WordPress has a security vulnerability in versions up to and including 4.0. This means that unauthenticated attackers can delete menu items without needing to log in. This is possible because the plugin doesn’t properly validate nonces in the ‘admin/page-main.php’ file. This makes it possible for attackers to trick a site administrator into clicking a link or performing another action that triggers the delete command.

Detected in:

Side Menu Lite – add sticky fixed buttons fixed vulnerable versions: >= * <= 4.0
Side Menu Lite – Sticky Floating Side Menu fixed vulnerable versions:

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

  • Incorrect?

Is this information incorrect? Please leave us a message.