Pulseextensions Altra Side Menu — known CVE vulnerabilities

Every CVE whose affected-product data names Pulseextensions Altra Side Menu, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (2)

• CVE-2024-12773 — CVSS 7.2 (high): The Altra Side Menu WordPress plugin through 2.0 does not sanitize and escape a parameter before using it in a SQL statement, allowing…
• CVE-2024-12774 — CVSS 6.5 (medium): The Altra Side Menu WordPress plugin through 2.0 does not have CSRF checks in some places, which could allow attackers to make logged in…