If Menu – Visibility control for Menus

If Menu – Visibility control for Menus has 2 disclosed vulnerabilities in the WordSec catalog, reported between 2023 and 2024; all 2 are fixed as of September 2026. Their average CVSS score is 5.3, and the most serious one scores 5.3 out of 10.

The most common weakness is Missing Authorization, behind 2 of the records (100%).

Every one of the 2 issues recorded for If Menu – Visibility control for Menus has a vendor fix available, so running the current release closes all known holes.

2 independent researchers contributed these findings, one record each. If Menu – Visibility control for Menus is installed on roughly 50,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.7.7.

Strategic Overview

Avg CVSSMedium
5.3/ 10
Patch Coverage100%
Open

0

Fixed

2

Get automatic notifications for all If Menu – Visibility control for Menus vulnerabilities before they are exploited.

Highest severity on recordCVSS 5.3CVE-2024-7894

If Menu <= 0.19.1 - Missing Authorization to License Key Update

Read the full analysis

Vulnerability Records

2 records
If Menu – Visibility control for Menus banner
Latestv0.19.2

If Menu – Visibility control for Menus

Andrei

Author

Andrei

4.1(130)
82/100
Last Updated
2024-12-05 (2y ago)
Active Installs
50,000+
Downloads
1,102,984
Requires WP
0+
Requires PHP
6.0+
Tested up to
WP 6.7.7
Created
2012-10-10 (14y ago)

Control what menu items your site’s visitors see, with visibility rules. Here are a few examples: Display a menu item only if User is logged in Hide menus if Device is mobile Display menus only for Admins and Editors Hide Login or Register links for Logged in Users Display menus for Users from US or UK Display menus only for Customers with active membership Display menus for visitors browsing with Language English or Spanish After the plugin is enabled, each menu item will have a new option “Change menu item visibility” which will enable the selection of visibility rules. Check the examples in screenshots or try it here → demos.layered.store Features Basic set of visibility rules User state User is logged in User roles Admin Editor Author etc Page type Front page Single page Single post Is Archive page (year, category, search results, etc) Visitor device Is Mobile Advanced visibility rules – requires More Visibility Rules Add-on Visitor location – detect visitor’s Country Visitor language – detect visitor’s selected Language WooCommerce Subscriptions – Display menus for users with active subscription WooCommerce Memberships – Display menus for customers with active membership plans Groups – Detect if users are in specific groups WishList Member – Detect the users’ membership level Restrict Content Pro – Detect the users’ subscription level Multiple rules – mix multiple rules for a menu item visibility show if User is logged in AND Device is mobile show if User is Admin AND Is front page Support for adding your custom rules

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C