PLUGIN SECURITY
Is Float Menu safe?
Known vulnerabilities, PHP compatibility and safer alternatives for the Float Menu WordPress plugin — checked against WP Clinic's local security database.
Plugin details
- Slug:
float-menu - Requires PHP: 7.4+
- Max supported PHP (analyzed): 8.4
Known vulnerabilities
- Float menu – awesome floating side menu [float-menu] < 4.3.1 [CVE-2022-0313, WordPress Float menu plugin <= 4.3 - Arbitrary Menu Deletion via Cross-Site Request Forgery (CSRF) vulnerability, Float Menu <= 4.3 - Arbitrary Menu Deletion via Cross-Site Request Forgery, Float Menu < 4.3.1 - Arbitrary Menu Deletion via CSRF]
- Float menu – awesome floating side menu [float-menu] < 5.0.3 [CVE-2023-3225, WordPress Float menu Plugin < 5.0.3 is vulnerable to Cross Site Scripting (XSS), Float menu <= 5.0.2 - Authenticated(Administrator+) Stored Cross-Site Scripting, Float menu < 5.0.3 - Admin+ Stored Cross-Site Scripting]
- Float menu – awesome floating side menu [float-menu] < 5.0.2 [CVE-2023-2362, Multiple Wow-Company Plugins (Various Versions) -- Reflected Cross-Site Scripting via 'page' parameter, Multiple Plugins from Wow-Company - Reflected XSS]
- Float menu – awesome floating side menu [float-menu] < 6.0.1 [CVE-2024-2405, WordPress Float menu Plugin < 6.0.1 is vulnerable to Cross Site Request Forgery (CSRF), Float menu – awesome floating side menu <= 6.0 - Cross-Site Request Forgery to Menu Deletion]
- Float menu – awesome floating side menu [float-menu] < 6.1.3 [CVE-2025-30912, WordPress Float menu Plugin <= 6.1.2 is vulnerable to Cross Site Request Forgery (CSRF), Float menu <= 6.1.2 - Cross-Site Request Forgery to Settings Update, EUVD-2025-8301]
Vulnerabilities are matched against the exact installed version when it's known. Always keep the plugin updated to the latest release.
Safer / more established alternatives
- Admin Menu Editor — 300000+ active installs — max PHP 8.4
- Max Mega Menu — 300000+ active installs — max PHP 8.4
- Sticky Menu & Sticky Header — 100000+ active installs — max PHP 8.4
- Menu Image, Icons made easy — 100000+ active installs — max PHP 8.4
- Duplicate Menu — 100000+ active installs
Check your own WordPress site
Run a free passive scan now, or create a free account and install the WP Clinic plugin for a deep scan of your whole hosting account and AI-assisted repair.