Read the docs

themehunk

Records47All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical9CVSS 9.0–10.0
CVSS high11CVSS 7.0–8.9

Exploited now

themehunk records in CISA KEV

No themehunk vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Contact Form & Lead Form Elementor Builder 5 records MEDIUM Wp Popup Builder 4 records HIGH Big Store 2 records LOW Hunk Companion 2 records HIGH Mega Menu 2 records LOW Advance Product Search 1 record MEDIUM Gutenberg Blocks 1 record LOW Th Advance Product Search 1 record MEDIUM

Records

2 records in Mega Menu · all components

TI-2025-22260 CVE-2025-30990 · GHSA-vrgq-8x87-23c7

WordPress ThemeHunk plugin <= 1.2.0 - Broken Access Control vulnerability

Priority LOW 24

Missing Authorization vulnerability in ThemeHunk ThemeHunk themehunk-megamenu-plus allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ThemeHunk: from n/a through <= 1.2.0.

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00263 Published 2025-06-06 No fix listed CWE-862
TI-2024-07819 CVE-2024-8434 · GHSA-564c-h2vx-x449

Missing authorization in themehunk Easy Mega Menu for WordPress – ThemeHunk

Priority LOW 20

The Easy Mega Menu Plugin for WordPress – ThemeHunk plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on several functions hooked via AJAX in all versions up to, and including, 1…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00351 Published 2024-09-25 No fix listed CWE-862
Open these records in search →