heroplugins
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Hero Mega Menu - Responsive WordPress Menu Plugin | 3 | – | Mar 5, 2025 |
| Hero Slider - WordPress Slider Plugin | 1 | – | Mar 5, 2025 |
Exploited and recent CVEs
- CVE-2024-13809 Hero Slider - WordPress Slider Plugin <= 1.3.5 - Authenticated (Subscriber+) SQL Injection 0.3%
- CVE-2024-13778 Hero Mega Menu - Responsive WordPress Menu Plugin <= 1.16.5 - Authenticated (Subscriber+) SQL Injection 0.4%
- CVE-2024-13779 Hero Mega Menu - Responsive WordPress Menu Plugin <= 1.16.5 - Reflected Cross-Site Scripting 0.3%
- CVE-2024-13780 Hero Mega Menu - Responsive WordPress Menu Plugin <= 1.16.5 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Directory Deletion 0.3%