PatchTheCVEbreadcrumbs by menu vulnerabilities and fixes
Recent CVEs affecting breadcrumbs by menu, with upgrade or downgrade steps. 2 tracked.
Also searched as: breadcrumbsbymenu.
breadcrumbs by menu has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 2. Most recent: 2019-09-03. Highest priority: CVE-2019-15865 (score 44/100).
- CVE-2019-15865 HIGH 8.8 UPGRADE The breadcrumbs-by-menu plugin before 1.0.3 for WordPress has CSRF.
- CVE-2019-15864 MEDIUM 6.1 UPGRADE The breadcrumbs-by-menu plugin before 1.0.3 for WordPress has XSS.
FAQ
How do I fix breadcrumbs by menu vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is breadcrumbs by menu being exploited right now?
None of the tracked breadcrumbs by menu CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which breadcrumbs by menu CVE should I patch first?
CVE-2019-15865 currently ranks highest (44/100): The breadcrumbs-by-menu plugin before 1.0.3 for WordPress has CSRF..