TI-2021-06453 Aliases CVE-2021-24161 GHSA-2jmf-ff5x-92qw

Responsive Menu < 4.0.4 - CSRF to Arbitrary File Upload

MEDIUM 41CWE-352Published 2021-04-05 · Updated 2024-08-03

Key facts

Attack vector: Network
Privileges required: None
User interaction: Required
Attack complexity: Low
Impact type: Tampering
Confidentiality · integrity · availability: High · High · High
Fix status: Fixed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-352.

Summary

In the Reponsive Menu (free and Pro) WordPress plugins before 4.0.4, attackers could craft a request and trick an administrator into uploading a zip archive containing malicious PHP files. The attacker could then access those files to achieve remote code execution and further infect the targeted site.

Why it matters now

EPSS 0.01249 69th percentileScored 2026-11-07

Public exploit Yes 1 exploit referenceTagged by NVD

Fix Fixed Responsive Menu – Create Mobile-Friendly Menu (ExpressTech): 4.0.4Responsive Menu Pro (ExpressTech): 4.0.4

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
ExpressTech	Responsive Menu – Create Mobile-Friendly Menu	4.0.4 to before 4.0.4	4.0.4	Patch available	CNA
ExpressTech	Responsive Menu Pro	4.0.4 to before 4.0.4	4.0.4	Patch available	CNA

Responsive Menu – Create Mobile-Friendly Menu VendorExpressTech Affected 4.0.4 to before 4.0.4 Fixed in 4.0.4 Patch available CNA
Responsive Menu Pro VendorExpressTech Affected 4.0.4 to before 4.0.4 Fixed in 4.0.4 Patch available CNA

CPE configurations NVD · 2

CPE	Versions	Role	Vendor
cpe:2.3:a:expresstech:responsive_menu:::::free:wordpress::	before 4.0.4	Vulnerable	ExpressTech
cpe:2.3:a:expresstech:responsive_menu:::::pro:wordpress::	before 4.0.4	Vulnerable	ExpressTech

cpe:2.3:a:expresstech:responsive_menu:*:*:*:*:free:wordpress:*:* Versions before 4.0.4 Vulnerable ·ExpressTech
cpe:2.3:a:expresstech:responsive_menu:*:*:*:*:pro:wordpress:*:* Versions before 4.0.4 Vulnerable ·ExpressTech

Remediation

Fix · CNA Responsive Menu – Create Mobile-Friendly Menu (ExpressTech) Fixed in 4.0.4
Fix · CNA Responsive Menu Pro (ExpressTech) Fixed in 4.0.4

Fixed in the same release

Records fixed by the same vendor advisory or release, as the CNA lists them.

Release · 2021-04-05
ExpressTech Responsive Menu Pro, Responsive Menu – Create Mobile-Friendly Menu 4.0.4
3 records Highest priority Priority MEDIUM 2 MEDIUM, 1 LOW
Other records, highest priority first
- TI-2021-06452 Responsive Menu 4.0.0 - 4.0.3 - Authenticated Arbitrary File UploadPriority MEDIUM 49
- TI-2021-06454 Responsive Menu < 4.0.4 - CSRF to Settings UpdatePriority LOW 39
Show all 3 records →

Timeline

2026-10-02 Threatist record created from CVE-2021-24161
2026-10-03 Alias added: GHSA-2jmf-ff5x-92qw

References

Exploit 1

https://www.wordfence.com/blog/2021/02/multiple-vulnerabilities-patched-in-responsive-menu-plugin/

Advisory 1

https://wpscan.com/vulnerability/efca27e0-bdb6-4497-8330-081f909d6933

TI-2021-06452 Responsive Menu 4.0.0 - 4.0.3 - Authenticated Arbitrary File Upload CVSS 3.1HIGH 8.8
TI-2022-09192 Information disclosure in ExpressTech Responsive Menu CVSS 3.1HIGH 8.8
TI-2021-06454 Responsive Menu < 4.0.4 - CSRF to Settings Update CVSS 3.1HIGH 8.8
TI-2017-13686 The responsive-menu plugin before 3.1.4 for WordPress has no CSRF protection mechanism for the admin interface. CVSS 3.0HIGH 8.8

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences