Jane Menu vulnerabilities
We track 1 vulnerability in Jane Menu products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on October 21, 2026.
1vulnerabilities
0critical
1high
0exploited
8.8average CVSS score
Latest Jane Menu vulnerabilities
- 8.8 High severity
Jane Menu: Improper Neutralization of Input During Web Page Generation
The Jane Menu WordPress plugin before 1.5.1 does not have any capability or nonce checks on one of its form handlers, which is reachable by unauthenticated users, allowing them to bind any published page to a remote document of their choosing. The plugin then