Signal is active with 3 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
The Clever Mega Menu for Visual Composer WordPress plugin through 1.0.1 does not perform a nonce or capability check in an AJAX action that updates navigation menu item metadata, allowing any authenticated user, including Subscribers, to overwrite menu item content and settings that are rendered in the site's public navigation.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
CVE-2026-11872 Unauthenticated Menu Item Metadata Modification in Clever Mega Menu for Visual Composer https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-11872
Post summary
A brief mention of CVE-2026-11872, noting an unauthenticated metadata modification in the Clever Mega Menu plugin, but with no additional technical, exploitation, or mitigation details.
🚨*CVE* CVE-2026-11872 The Clever Mega Menu for Visual Composer WordPress plugin through 1.0.1 does not perform a nonce or capability check in an AJAX action that updates navigation menu it… https://www.cve.org/CVERecord?id=CVE-2026-11872 ----- Traducción: CVE-2026-11872 El … http://infoflow.cloud`
Post summary
The message identifies a missing nonce/capability check in the Clever Mega Menu plugin’s AJAX action, qualifying as a vulnerability disclosure with no PoC, exploit, or patch referenced.
CVE-2026-11872 The Clever Mega Menu for Visual Composer WordPress plugin through 1.0.1 does not perform a nonce or capability check in an AJAX action that updates navigation menu it… https://www.cve.org/CVERecord?id=CVE-2026-11872
Post summary
CVE-2026-11872 exposes a missing nonce/capability check in the Clever Mega Menu plugin’s AJAX action, allowing unauthorized updates to navigation menus.