Qr Menu Pro Smart Menu Systems CVEs and Security Vulnerabilities

CVE-2025-7013

IDOR in QRMenumPro's Menu Panel

Authorization Bypass Through User-Controlled Key vulnerability in QR Menu Pro Smart Menu Systems Menu Panel allows Exploitation of Trusted Identifiers. This issue affects Menu Panel: through 29012026. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

CVSS 3.1 · 5.7 Medium EPSS < 1% KEV · Not listed

Vendors

Qr Menu Pro Smart Menu Systems Qrmenumpro

Products

Menu Panel Menu Panel

CVE-2025-7014

Session Hijacking in QRMenumPro's Menu Panel

Session Fixation vulnerability in QR Menu Pro Smart Menu Systems Menu Panel allows Session Hijacking. This issue affects Menu Panel: through 29012026. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.