heroplugins

Products

ProductCVEsExploitedLatest
Hero Mega Menu - Responsive WordPress Menu Plugin3–Mar 5, 2025
Hero Slider - WordPress Slider Plugin1–Mar 5, 2025

Exploited and recent CVEs

  • CVE-2024-13809 Medium 6.5 Hero Slider - WordPress Slider Plugin <= 1.3.5 - Authenticated (Subscriber+) SQL Injection 0.3%
  • CVE-2024-13778 Medium 6.5 Hero Mega Menu - Responsive WordPress Menu Plugin <= 1.16.5 - Authenticated (Subscriber+) SQL Injection 0.4%
  • CVE-2024-13779 Medium 6.1 Hero Mega Menu - Responsive WordPress Menu Plugin <= 1.16.5 - Reflected Cross-Site Scripting 0.3%
  • CVE-2024-13780 Medium 6.5 Hero Mega Menu - Responsive WordPress Menu Plugin <= 1.16.5 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Directory Deletion 0.3%