← WordPress Vulnerabilities
WordPress security by component

Side Menu Lite

Side Menu Lite is a WordPress component with 3 published CVE records in this archive. The latest tracked vulnerability was published Aug 30, 2021; the highest CVE/CNA score is 8.8.

Plugin slug: side-menu

CVE-2021-24580: Side Menu Lite: SQL injection

Side Menu Lite is affected by SQL injection. Exposure depends on how the affected operation is made reachable by the site. A successful request can alter database queries and expose or modify WordPress data.

PublishedAug 30, 2021
Safe version guidanceSee mitigation notes
Safe version
Aug 30, 2021 CVE-2021-24580
Side Menu Lite: SQL injection
Side Menu Lite is affected by SQL injection. Exposure depends on how the affected operation is made reachable by the site. A successful request can alter database queries and expose or modify WordPress data.
See mitigation notes
CVE8.8
NVD8.8
Aug 09, 2021 CVE-2021-24521
Side Menu Lite – add sticky fixed buttons: SQL injection
Side Menu Lite – add sticky fixed buttons is affected by SQL injection. Exposure depends on how the affected operation is made reachable by the site. A successful request can alter database queries and expose or modify WordPress data.
See mitigation notes
CVE7.2
NVD7.2
Jun 14, 2021 CVE-2021-24348
menu delete functionality of the Side Menu – add fixed side buttons: SQL injection
menu delete functionality of the Side Menu – add fixed side buttons is affected by SQL injection. Exposure depends on how the affected operation is made reachable by the site. A successful request can alter database queries and expose or modify WordPress data.
See mitigation notes
CVE7.2
NVD7.2