{"items":[{"id":"CVE-2024-13809","published":"2025-03-05T09:21:48.298Z","updated":"2026-04-08T17:13:32.512Z","title":"Hero Slider - WordPress Slider Plugin <= 1.3.5 - Authenticated (Subscriber+) SQL Injection","severity":"MEDIUM","score":6.5,"vendor":"heroplugins","product":"Hero Slider - WordPress Slider Plugin","kev":false,"epss":0.00348,"kevAdded":null,"exploit":false},{"id":"CVE-2024-13778","published":"2025-03-05T09:21:46.801Z","updated":"2026-04-08T16:55:28.966Z","title":"Hero Mega Menu - Responsive WordPress Menu Plugin <= 1.16.5 - Authenticated (Subscriber+) SQL Injection","severity":"MEDIUM","score":6.5,"vendor":"heroplugins","product":"Hero Mega Menu - Responsive WordPress Menu Plugin","kev":false,"epss":0.00354,"kevAdded":null,"exploit":false},{"id":"CVE-2024-13779","published":"2025-03-05T09:21:44.519Z","updated":"2026-04-08T16:37:42.397Z","title":"Hero Mega Menu - Responsive WordPress Menu Plugin <= 1.16.5 - Reflected Cross-Site Scripting","severity":"MEDIUM","score":6.1,"vendor":"heroplugins","product":"Hero Mega Menu - Responsive WordPress Menu Plugin","kev":false,"epss":0.0026,"kevAdded":null,"exploit":false},{"id":"CVE-2024-13780","published":"2025-03-05T09:21:44.132Z","updated":"2026-04-08T16:37:25.320Z","title":"Hero Mega Menu - Responsive WordPress Menu Plugin <= 1.16.5 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Directory Deletion","severity":"MEDIUM","score":6.5,"vendor":"heroplugins","product":"Hero Mega Menu - Responsive WordPress Menu Plugin","kev":false,"epss":0.00344,"kevAdded":null,"exploit":false}]}