Skip to content
Threat Feed
Subscribe

Product

Jane Menu (< 1.5.1)

1 brief RSS
high advisory

Jane Menu WordPress Plugin: Unauthenticated Stored Cross-Site Scripting (CVE-2026-85683)

The Jane Menu WordPress plugin prior to 1.5.1 contains a vulnerability allowing unauthenticated attackers to perform Stored Cross-Site Scripting via improper capability and nonce checks in a form handler.

Jane Menu wordpress xss web-vulnerability
2t 1c