PT-2026-5266 · Unknown · Qr Menu Pro+1

Published 2026-01-29 · Updated 2026-03-09 · CVE-2025-7013

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions QR Menu Pro Smart Menu Systems Menu Panel versions through 29012026

Description An authorization bypass exists due to user-controlled key handling in the Menu Panel. This allows exploitation of trusted identifiers. The vendor was contacted regarding this issue but did not respond.

Recommendations Versions prior to 29012026 should be updated.

Fix

IDOR

Weakness Enumeration

CWE-639

Related Identifiers

CVE-2025-7013

Affected Products

Menu Panel

Qr Menu Pro

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2025-7013 · Security Note
• https://osv.dev/vulnerability/CVE-2025-7013 · Vendor Advisory
• https://usom.gov.tr/bildirim/tr-26-0007 · Note
• https://twitter.com/dailycve/status/2031042634001588462 · Twitter Post
• https://t.me/cveNotify/154783 · Telegram Post
• https://twitter.com/CVEnew/status/2016881158618042861 · Twitter Post