themewant
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Easy Elements for Elementor – Addons & Website Templates | 2 | – | May 22, 2026 |
| Easy Hotel Booking | 2 | – | Feb 20, 2026 |
| RT Mega Menu – Mega Menu Builder for Elementor & Gutenberg | 2 | – | Sep 18, 2026 |
| RT Mega Menu – Mega Menu Builder for Elementor & Gutenberg | 2 | – | Jul 27, 2026 |
| Easy Elements for Elementor – Addons & Website Templates | 1 | – | Jun 26, 2026 |
Exploited and recent CVEs
- CVE-2026-14855 RT Mega Menu <= 1.5.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting via rtmega_update_menu_options AJAX Action 0.3%
- CVE-2026-15650 RT Mega Menu <= 1.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'pointer_menu_item' Block Attribute 0.4%
- CVE-2026-65433 WordPress RT Mega Menu – Mega Menu Builder for Elementor & Gutenberg plugin <= 1.5.1 - Broken Access Control vulnerability 0.3%
- CVE-2026-59559 WordPress RT Mega Menu – Mega Menu Builder for Elementor & Gutenberg plugin <= 1.5.1 - Cross Site Scripting (XSS) vulnerability 0.2%
- CVE-2026-56028 WordPress Easy Elements for Elementor – Addons & Website Templates plugin <= 1.4.9 - Privilege Escalation vulnerability 0.5%
- CVE-2026-9018 Easy Elements for Elementor – Addons & Website Templates <= 1.4.5 - Unauthenticated Privilege Escalation via 'custom_meta' Parameter 0.7%
- CVE-2026-7284 Easy Elements for Elementor <= 1.4.4 - Unauthenticated Privilege Escalation via easyel_handle_register 0.5%
- CVE-2025-68005 WordPress Easy Hotel Booking plugin <= 1.9.2 - Broken Access Control vulnerability 0.4%
- CVE-2025-57938 WordPress Easy Hotel Booking plugin <= 1.9.0 - Cross Site Scripting (XSS) vulnerability 0.2%