Qrmenumpro vulnerabilities
Published CVEs affecting Qrmenumpro products: 2 record(s), with severity, exploitation and fixes.
CVE-2025-7014
High · 8.8
CWE-384 Jan 29, 2026
Session Hijacking in QRMenumPro's Menu Panel
Session Fixation vulnerability in QR Menu Pro Smart Menu Systems Menu Panel allows Session Hijacking.
This issue affects Menu Panel: through 29012026.
NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
CVE-2025-7013
Critical · 9.8
CWE-639 Jan 29, 2026
QR Menu Pro Menu Panel Authorization Bypass via User-Controlled Key
Authorization Bypass Through User-Controlled Key vulnerability in QR Menu Pro Smart Menu Systems Menu Panel allows Exploitation of Trusted Identifiers.
This issue affects Menu Panel: through 29012026.
NOTE: The vendor was contacted early about this disclosure but did not respond in any way.