Menu In Post

Menu In Post has one disclosed vulnerability in the WordSec catalog, all reported in 2025; it remains unpatched as of September 2026. Their average CVSS score is 6.4, and the most serious one scores 6.4 out of 10.

The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).

The one issue recorded for Menu In Post has no published fix yet, which makes virtual patching the only reliable mitigation. The oldest unresolved one dates back to 2025.

All of these findings were reported by Muhammad Yudha - DJ. Menu In Post is installed on roughly 2,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.

Strategic Overview

Avg CVSSMedium

6.4/ 10

Patch Coverage0%

Open

Fixed

Get automatic notifications for all Menu In Post vulnerabilities before they are exploited.

Most severe open issueCVSS 6.4CVE-2026-22349

Menu In Post <= 1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting

Read the full analysis

Vulnerability Records

1 records


2025-12-30 00:00	Menu In Post <= 1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting Menu In Post <= 1.3	`CVE-2026-22349`	6.4 Medium	Muhammad Yudha - DJ	No

Showing 1–1 of 1 reports

Latestv1.5.0

Menu In Post

Author

linux4me2

5.0(8)

100/100

Last Updated

2026-08-20 (23d ago)

Active Installs

2,000+

Downloads

46,948

Requires WP

6.4+

Requires PHP

7.4+

Tested up to

WP 7.1

Created

2019-01-11 (8y ago)

With Menu In Post, you can create shortcodes to display menus as hyperlinked lists or dropdowns in posts, pages, and shortcode widgets. Menus are easier to manage through the WordPress user interface (UI) than a list of links. You can update a menu in one place (Appearance > Menus) and it will be updated everywhere you have added a Menu In Post shortcode for it. Features Admin UI in Tools for quickly building shortcodes Display menus as lists or drop-downs Configurable depth-level for submenus Configurable ordering (via WordPress Menus UI) Set optional IDs and/or classes to menu containers and lists Append a text string to the URL of all menu items Admin UI in Settings to tweak JavaScript loading and minification Works with block-enabled themes with option to display classic menu editor Use In WordPress Admin, look on the ‘Tools’ menu for Menu In Post Tools. Use Menu In Post Tools’ Shortcode Builder to build your menu shortcodes. Copy the menu shortcode and paste it into a Shortcode Block in the Gutenberg editor in a page, post or widget. Use the classic menu editor (Appearance > Menus) to add/edit menus. Optionally, select options in Settings > Menu In Post. No changes are necessary to use the plugin. Privacy Notice Menu In Post does not: track users by stealth write personal user data to the database send data to external servers use cookies Translations You can translate Menu In Post on translate.wordpress.org.

View on WordPress.org