Skip to content
Threat Feed
Subscribe

Vendor

Jane Menu

1 brief RSS
high advisory

Jane Menu WordPress Plugin: Unauthenticated Stored Cross-Site Scripting (CVE-2026-85683)

The Jane Menu WordPress plugin prior to 1.5.1 contains a vulnerability allowing unauthenticated attackers to perform Stored Cross-Site Scripting via improper capability and nonce checks in a form handler.

Jane Menu wordpress xss web-vulnerability
2t 1c