Menubar
Menubar has 2 disclosed vulnerabilities in the WordSec catalog, reported between 2022 and 2023; all 2 are fixed as of September 2026. Their average CVSS score is 5.9, and the most serious one scores 6.4 out of 10.
The most common weakness is Cross-Site Request Forgery (CSRF), behind 1 of the records (50%). Other recurring categories include Cross-Site Scripting.
Every one of the 2 issues recorded for Menubar has a vendor fix available, so running the current release closes all known holes.
2 independent researchers contributed these findings, one record each. Menubar is installed on roughly 1,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.
CVE-2022-1152Menubar <= 5.7.2 - Reflected Cross-Site Scripting
Read the full analysisVulnerability Records
Menubar
Author
Andrea Tarantini
With Menubar you can easily build and manage single and multi-level menus for your WordPress site. Use as menu items the homepage, the frontpage, a category or a category tree, a static page or a page tree, a tag archive or a tag list, a single post, a search box, or any URL, hard-coded or generated from a code snippet (see [1], [2], [3]) To display a menu, use the menubar shortcode or the Menubar widget, or insert a simple line of code in your child theme (see [1]) To style your menus, select one of the default Menubar templates, or your own customized template (see [1]) You can browse the documentation pages (below) or use the Live Preview button (top right). Menubar Menu Builder The Menubar PHP type
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C