Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

6 records

Vendor: heroplugins Clear all filters
TI-2024-12809 CVE-2024-13781 · GHSA-828w-32v8-434w

Hero Maps Premium - Customizable Google Maps Plugin <= 2.3.9 - Authenticated (Subscriber+) SQL Injection

Priority LOW 29

The Hero Maps Premium plugin for WordPress is vulnerable to SQL Injection via several AJAX actions in all versions up to, and including, 2.3.9 due to insufficient escaping on the user supplied parameter and lack of suffi…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00347 Published 2025-03-07 No fix listed CWE-89
TI-2024-12835 CVE-2024-13809 · GHSA-9mhq-mwr8-jhqr

Hero Slider - WordPress Slider Plugin <= 1.3.5 - Authenticated (Subscriber+) SQL Injection

Priority LOW 29

The Hero Slider - WordPress Slider Plugin plugin for WordPress is vulnerable to SQL Injection via several parameters in all versions up to, and including, 1.3.5 due to insufficient escaping on the user supplied parameter…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00348 Published 2025-03-05 No fix listed CWE-89
TI-2024-12806 CVE-2024-13778 · GHSA-hj5q-47g2-f9cm

Hero Mega Menu - Responsive WordPress Menu Plugin <= 1.16.5 - Authenticated (Subscriber+) SQL Injection

Priority LOW 29

The Hero Mega Menu - Responsive WordPress Menu Plugin plugin for WordPress is vulnerable to SQL Injection via several functions in all versions up to, and including, 1.16.5 due to insufficient escaping on the user suppli…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00354 Published 2025-03-05 No fix listed CWE-89
TI-2024-12807 CVE-2024-13779 · GHSA-ggf2-5pvw-h694

Hero Mega Menu - Responsive WordPress Menu Plugin <= 1.16.5 - Reflected Cross-Site Scripting

Priority LOW 27

The Hero Mega Menu - Responsive WordPress Menu Plugin plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'index' parameter in all versions up to, and including, 1.16.5 due to insufficient input…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0026 Published 2025-03-05 No fix listed CWE-79
TI-2024-12808 CVE-2024-13780 · GHSA-qmp5-2j86-r93w

Missing authorization in heroplugins Hero Mega Menu - Responsive WordPress Menu Plugin

Priority LOW 29

The Hero Mega Menu - Responsive WordPress Menu Plugin plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the hmenu_delete_menu() function in all versions up to, and…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00344 Published 2025-03-05 No fix listed CWE-862