Conditional Menus
Conditional Menus has 2 disclosed vulnerabilities in the WordSec catalog, reported between 2023 and 2026; all 2 are fixed as of September 2026. Their average CVSS score is 5.2, and the most serious one scores 6.1 out of 10.
The most common weakness is Cross-Site Request Forgery (CSRF), behind 1 of the records (50%). Other recurring categories include Cross-Site Scripting.
Every one of the 2 issues recorded for Conditional Menus has a vendor fix available, so running the current release closes all known holes.
2 independent researchers contributed these findings, one record each. Conditional Menus is installed on roughly 60,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.0.4.
CVE-2023-2654Conditional Menus <= 1.2.0 - Reflected Cross-Site Scripting
Read the full analysisVulnerability Records
Conditional Menus
Author
themifyme
Conditional Menus is a simple yet useful WordPress plugin by Themify, which allows you to swap the menus in the theme as per specific conditions. In short, you can have different menus in different posts, pages, categories, archive pages, etc. It works with any WordPress theme that uses the standard WordPress menu function. How to use it Once you activate the plugin, you will see the conditional menus on the Manage Locations tab located in your WP Admin > Appearance > Menus page. 1) To add conditional menu: click “Conditional Menu” and select a menu from the list (you can create these menus in the “Edit Menus” tab) – You can remove the menu by selecting “Disable Menu” from the list. 2) Click on “+ Conditions” to add conditions in the modal box (tick the checkboxes where you want the menu to appear) 3) To remove the conditional menus, click on the “X” button Visit https://themify.me/conditional-menus for more details.
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C