If Menu – Visibility control for Menus
If Menu – Visibility control for Menus has 2 disclosed vulnerabilities in the WordSec catalog, reported between 2023 and 2024; all 2 are fixed as of September 2026. Their average CVSS score is 5.3, and the most serious one scores 5.3 out of 10.
The most common weakness is Missing Authorization, behind 2 of the records (100%).
Every one of the 2 issues recorded for If Menu – Visibility control for Menus has a vendor fix available, so running the current release closes all known holes.
2 independent researchers contributed these findings, one record each. If Menu – Visibility control for Menus is installed on roughly 50,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.7.7.
CVE-2024-7894If Menu <= 0.19.1 - Missing Authorization to License Key Update
Read the full analysisVulnerability Records

If Menu – Visibility control for Menus
Author
Andrei
Control what menu items your site’s visitors see, with visibility rules. Here are a few examples: Display a menu item only if User is logged in Hide menus if Device is mobile Display menus only for Admins and Editors Hide Login or Register links for Logged in Users Display menus for Users from US or UK Display menus only for Customers with active membership Display menus for visitors browsing with Language English or Spanish After the plugin is enabled, each menu item will have a new option “Change menu item visibility” which will enable the selection of visibility rules. Check the examples in screenshots or try it here → demos.layered.store Features Basic set of visibility rules User state User is logged in User roles Admin Editor Author etc Page type Front page Single page Single post Is Archive page (year, category, search results, etc) Visitor device Is Mobile Advanced visibility rules – requires More Visibility Rules Add-on Visitor location – detect visitor’s Country Visitor language – detect visitor’s selected Language WooCommerce Subscriptions – Display menus for users with active subscription WooCommerce Memberships – Display menus for customers with active membership plans Groups – Detect if users are in specific groups WishList Member – Detect the users’ membership level Restrict Content Pro – Detect the users’ subscription level Multiple rules – mix multiple rules for a menu item visibility show if User is logged in AND Device is mobile show if User is Admin AND Is front page Support for adding your custom rules
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C