UberMenu

UberMenu has 2 disclosed vulnerabilities in the WordSec catalog, all reported in 2024; all 2 are fixed as of September 2026. Their average CVSS score is 6.8, and the most serious one scores 7.2 out of 10. Severity breakdown: 0 critical and 1 high. 2024 was the busiest year with 2 disclosures.

The most common weakness is Cross-Site Request Forgery (CSRF), behind 1 of the records (50%). Other recurring categories include Cross-Site Scripting.

Every one of the 2 issues recorded for UberMenu has a vendor fix available, so running the current release closes all known holes.

2 independent researchers contributed these findings, one record each.

Strategic Overview

Avg CVSSMedium

6.8/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all UberMenu vulnerabilities before they are exploited.

Highest severity on recordCVSS 7.2CVE-2024-3593

UberMenu <= 3.8.3 - Cross-Site Request Forgery to Settings Reset

Read the full analysis

Vulnerability Records

2 records


2024-06-21 16:39	UberMenu <= 3.8.3 - Cross-Site Request Forgery to Settings Reset UberMenu <= 3.8.3	`CVE-2024-3593`	7.2 High	M.Awad	Yes
2024-05-20 00:00	Uber Menu <= 3.8.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Shortcodes UberMenu <= 3.8.2	`CVE-2024-4710`	6.4 Medium	stealthcopter	Yes

Showing 1–2 of 2 reports