Menu Panel vulnerabilities

2 known vulnerabilities in Menu Panel from QR Menu Pro Smart Menu Systems. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  Menu Panel: Session Fixation

  CVE-2025-7014Jan 29, 2026QR Menu Pro Smart Menu Systems

  Session Fixation vulnerability in QR Menu Pro Smart Menu Systems Menu Panel allows Session Hijacking. This issue affects Menu Panel: through 29012026. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

• 9.8 Critical severity

  Menu Panel: Authorization Bypass Through User-Controlled Key

  CVE-2025-7013Jan 29, 2026QR Menu Pro Smart Menu Systems

  Authorization Bypass Through User-Controlled Key vulnerability in QR Menu Pro Smart Menu Systems Menu Panel allows Exploitation of Trusted Identifiers. This issue affects Menu Panel: through 29012026. NOTE: The vendor was contacted early about this disclosure