What’s Vulnerable › Products

Bubble Menu vulnerabilities

4 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 1 published in the last 12 months.

Check whether your Bubble Menu version is affected

Latest Bubble Menu vulnerabilities

• CVE-2025-24714 — WordPress Bubble Menu Plugin <= 4.0.2 - Cross Site Request Forgery (CSRF) vulnerability (CVSS 5.4)
• CVE-2023-3650 — Bubble Menu < 3.0.5 - Admin+ Stored XSS (CVSS 4.8)
• CVE-2023-2362 — Multiple Plugins from Wow-Company - Reflected XSS (CVSS 6.1)
• CVE-2023-23984 — WordPress Bubble Menu – circle floating menu Plugin <= 3.0.1 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 5.4)