Easy Mega Menu for WordPress – ThemeHunk
Easy Mega Menu for WordPress – ThemeHunk has 3 disclosed vulnerabilities in the WordSec catalog, reported between 2024 and 2025; all 3 are fixed as of September 2026. Their average CVSS score is 5.0, and the most serious one scores 6.4 out of 10. 2024 was the busiest year with 2 disclosures.
The most common weakness is Missing Authorization, behind 2 of the records (67%). Other recurring categories include Cross-Site Scripting.
Every one of the 3 issues recorded for Easy Mega Menu for WordPress – ThemeHunk has a vendor fix available, so running the current release closes all known holes.
2 independent researchers contributed these findings, most of them (2) reported by Lucio Sá. Easy Mega Menu for WordPress – ThemeHunk is installed on roughly 1,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.9.7.
CVE-2024-8433Easy Mega Menu Plugin for WordPress – ThemeHunk <= 1.1.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Read the full analysisVulnerability Records

Easy Mega Menu for WordPress – ThemeHunk
Author
ThemeHunk
ThemeHunk Megamenu Plus Looking to enhance your WordPress menu? ThemeHunk Megamenu is your go-to plugin! This free, lightning-fast solution offers complete styling options for both normal and mega menus. Whether you’re adding pages, posts, widgets, products, text, or custom links, this plugin has you covered. Perfect for various website types including shops, agencies, blogs, and magazines, ThemeHunk Megamenu ensures your menu stands out while maintaining functionality. This is an easy-to-use responsive drop-down menu builder. You can add background images and colour separately for each menu. Elevate your site’s navigation effortlessly with ThemeHunk Megamenu! ThemeHunk Megamenu | Docs Key Features:- Drag and Drop Mega Menu Builder. 150+ Free Icon Collections. 100% Responsive for All Devices. Styling Options for the Default Menu. Styling Options for Megamenu. Display menu using Automatic Integration, Block, Widget or Shortcode. Support page, post, widgets, products, text and custom link in the mega menu. Unlimited row and column builder.
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C