Description
WordPress Plugin WP Floating Menu-One page navigator, sticky menu for WordPress [only if downloaded via the vendor website] contains suspicious code. Attackers can exploit this issue to perform a variety of actions. Successful attacks will compromise the affected application and possibly the webserver or computer. WordPress Plugin WP Floating Menu-One page navigator, sticky menu for WordPress version 1.4.4 is vulnerable; prior versions may also be affected.
Remediation
Update to plugin version 1.4.5 or latest
References
Related Vulnerabilities
WordPress 4.2.x Arbitrary File Deletion Vulnerability (4.2 - 4.2.20)
Drupal Core Multiple Vulnerabilities (8.0.0 - 9.1.15)
WordPress Plugin Kanzu Support Desk-WordPress Helpdesk Remote Code Execution (2.4.6)
Apache 2.2.14 mod_isapi Dangling Pointer
WordPress Plugin Peter's Math Anti-Spam Audio CAPTCHA Security Bypass (0.1.6)