Back to Database
Status published
High
CVE-2022-25602
WordPress Responsive Menu plugin <= 4.1.7 - Nonce token leak leading to arbitrary file upload, theme deletion, plugin settings change vulnerability
Vulnerability Description
Nonce token leak vulnerability leading to arbitrary file upload, theme deletion, plugin settings change discovered in Responsive Menu WordPress plugin (versions <= 4.1.7).
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2022-25602
Credits & Attribution
The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:
- Vulnerability discovered by Dave Jong (Patchstack).
References
More from ExpressTech
View All →CVE-2024-27966
WordPress Quiz And Survey Master plugin <= 8.2.2 - Cross Site Scripting (XSS) vulnerability
Medium
5.9
CVE-2023-51521
WordPress Quiz And Survey Master plugin <= 8.1.18 - Cross Site Request Forgery (CSRF) vulnerability
Medium
5.4
CVE-2023-51507
WordPress Quiz And Survey Master plugin <= 8.1.16 - Broken Access Control vulnerability
Medium
5.3
CVE-2023-47834
WordPress Quiz And Survey Master Plugin <= 8.1.13 is vulnerable to Cross Site Scripting (XSS)
Medium
6.5
CVE-2023-37984
WordPress Quiz And Survey Master plugin <= 8.1.10 - Broken Access Control vulnerability
Medium
4.3
Affected Vendor
ExpressTech
View all reports →Affected Software
Responsive Menu (WordPress plugin)
Vulnerable Versions:
<= 4.1.7
Timeline
Official Publish:
March 18th, 2022
Last Modified:
April 28th, 2026
Added to House:
July 21st, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L