WordPress security by component

Menu Icons by ThemeIsle

Plugin description

Menu Icons by ThemeIsle is a WordPress component with 2 published CVE records in this archive. The latest tracked vulnerability was published Feb 03, 2026; the highest CVE/CNA score is 6.4.

Plugin slug: menu-icons

Latest vulnerability

CVE-2026-1755: Menu Icons by ThemeIsle: Cross-site scripting

Menu Icons by ThemeIsle is affected by cross-site scripting. Exploitation requires at least author-level access. Injected script can execute in the affected site's origin when the vulnerable output is viewed.

PublishedFeb 03, 2026

Safe version guidanceSee mitigation notes

		Safe version
Feb 03, 2026	CVE-2026-1755 Menu Icons by ThemeIsle: Cross-site scripting Menu Icons by ThemeIsle is affected by cross-site scripting. Exploitation requires at least author-level access. Injected script can execute in the affected site's origin when the vulnerable output is viewed.	See mitigation notes	CVE6.4 NVDPending
May 16, 2024	CVE-2024-4635 Menu Icons by ThemeIsle: Cross-site scripting Menu Icons by ThemeIsle is affected by cross-site scripting. Exploitation requires an authenticated WordPress account. Injected script can execute in the affected site's origin when the vulnerable output is viewed.	See mitigation notes	CVE6.4 NVDPending