CVE-2026-92465

7.6 HIGH

Published 2026-09-16 · Updated 2026-09-16

AI analysis for this CVE has not been generated yet. Raw NVD data is shown below.

NVD description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Themeum WP Mega Menu allows Blind SQL Injection. This issue affects WP Mega Menu: from n/a through 1.4.2.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:L

Weaknesses

CWE-89

All references

https://patchstack.com/database/wordpress/plugin/wp-megamenu/vulnerability/wordpress-wp-mega-menu-plugin-1-4-2-sql-injection-vulnerability?_s_id=cve

Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.

Related CVEs

MEDIUMCVE-2026-11421
MEDIUMCVE-2026-11920
MEDIUMCVE-2026-11969
MEDIUMCVE-2026-11977
MEDIUMCVE-2026-13191
MEDIUMCVE-2026-13200
MEDIUMCVE-2026-14872
MEDIUMCVE-2026-15281

Related by shared AI tags and CWE weakness class. Browse the full archive.