Vulnerabilities > WP Home Page Menu Project
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2022-03-14 | CVE-2022-0684 | Cross-site Scripting vulnerability in WP Home Page Menu Project WP Home Page Menu 1.0/2.0/3.0 The WP Home Page Menu WordPress plugin before 3.1 does not sanitise and escape its settings, allowing high privilege users such as admin to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed | 4.8 |