Read the docs

heroplugins

Records6All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

heroplugins records in CISA KEV

No heroplugins vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Hero Maps Premium 2 records LOW

Records

6 records

TI-2024-12835 CVE-2024-13809 · GHSA-9mhq-mwr8-jhqr

Hero Slider - WordPress Slider Plugin <= 1.3.5 - Authenticated (Subscriber+) SQL Injection

Priority LOW 29

The Hero Slider - WordPress Slider Plugin plugin for WordPress is vulnerable to SQL Injection via several parameters in all versions up to, and including, 1.3.5 due to insufficient escaping on the user supplied parameter…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00348 Published 2025-03-05 No fix listed CWE-89
TI-2024-12809 CVE-2024-13781 · GHSA-828w-32v8-434w

Hero Maps Premium - Customizable Google Maps Plugin <= 2.3.9 - Authenticated (Subscriber+) SQL Injection

Priority LOW 29

The Hero Maps Premium plugin for WordPress is vulnerable to SQL Injection via several AJAX actions in all versions up to, and including, 2.3.9 due to insufficient escaping on the user supplied parameter and lack of suffi…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00347 Published 2025-03-07 No fix listed CWE-89
TI-2024-12808 CVE-2024-13780 · GHSA-qmp5-2j86-r93w

Missing authorization in heroplugins Hero Mega Menu - Responsive WordPress Menu Plugin

Priority LOW 29

The Hero Mega Menu - Responsive WordPress Menu Plugin plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the hmenu_delete_menu() function in all versions up to, and…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00344 Published 2025-03-05 No fix listed CWE-862
TI-2024-12806 CVE-2024-13778 · GHSA-hj5q-47g2-f9cm

Hero Mega Menu - Responsive WordPress Menu Plugin <= 1.16.5 - Authenticated (Subscriber+) SQL Injection

Priority LOW 29

The Hero Mega Menu - Responsive WordPress Menu Plugin plugin for WordPress is vulnerable to SQL Injection via several functions in all versions up to, and including, 1.16.5 due to insufficient escaping on the user suppli…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00354 Published 2025-03-05 No fix listed CWE-89
TI-2024-12807 CVE-2024-13779 · GHSA-ggf2-5pvw-h694

Hero Mega Menu - Responsive WordPress Menu Plugin <= 1.16.5 - Reflected Cross-Site Scripting

Priority LOW 27

The Hero Mega Menu - Responsive WordPress Menu Plugin plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'index' parameter in all versions up to, and including, 1.16.5 due to insufficient input…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0026 Published 2025-03-05 No fix listed CWE-79
Open these records in search →