CVE-2024-54282

Summary

CVE-2024-54282 is a newly identified vulnerability that puts Themeum WP Mega Menu users at risk. The issue involves a Deserialization of Untrusted Data vulnerability that enables Object Injection. This means that an attacker can inject malicious code into the WP Mega Menu plugin, potentially taking control of affected websites. The flaw affects all versions of WP Mega Menu from the unspecified n/a through 1.4.2. Immediate updates to the latest version of the plugin are strongly recommended to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.