PLUGIN SECURITY
Is Float Menu safe?
Easily create floating menus of varying complexity. Use its capabilities to place unique navigation on the site.
What this plugin does
- Slug:
float-menu - Author: Wow-Company
- 30000+ active installs
- 88/100 rating (41 reviews on wordpress.org)
- 840830 all-time downloads
- On WordPress.org since 2017-04-07
floating menumenunavigationside menusticky menu
Maintenance status
- Latest known version: 7.2.5
- Last updated: 2026-08-25 6:02am GMT
- Tested up to WordPress: 7.1
- Requires PHP: 7.4+
- Max supported PHP (analyzed): 8.4
Known vulnerabilities
5 known CVEs on file for Float Menu. Reported between 2022 and 2025.
| CVE | Vulnerability | Type | Severity | Affected | Fixed in | Published | Status |
|---|---|---|---|---|---|---|---|
| CVE-2025-30912 | Float menu – awesome floating side menu [float-menu] < 6.1.3 | Cross-Site Request Forgery (CSRF) | Medium 5.4 | < 6.1.3 | 6.1.3 | 2025-03-27 | ✓ fixed in latest |
| CVE-2024-2405 | Float menu – awesome floating side menu [float-menu] < 6.0.1 | Cross-Site Request Forgery (CSRF) | Medium 4.5 | < 6.0.1 | 6.0.1 | 2024-04-11 | ✓ fixed in latest |
| CVE-2023-3225 | Float menu – awesome floating side menu [float-menu] < 5.0.3 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | Medium 4.8 | < 5.0.3 | 5.0.3 | 2023-06-19 | ✓ fixed in latest |
| CVE-2023-2362 | Float menu – awesome floating side menu [float-menu] < 5.0.2 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | Medium 6.1 | < 5.0.2 | 5.0.2 | 2023-05-22 | ✓ fixed in latest |
| CVE-2022-0313 | Float menu – awesome floating side menu [float-menu] < 4.3.1 | Cross-Site Request Forgery (CSRF) | Medium 4.3 | < 4.3.1 | 4.3.1 | 2022-01-24 | ✓ fixed in latest |
How to fix it
Keep Float Menu updated — 7.2.5 is the latest version on wordpress.org, and each CVE above lists the exact release that fixed it ("Fixed in").
This is the plugin's full known vulnerability history, not a scan of any specific installation — run a free scan of your own site to check your exact installed version.
Safer / more established alternatives
- Admin Menu Editor — 300000+ active installs — 92/100 (312) — max PHP 8.4
- Max Mega Menu — 300000+ active installs — 96/100 (877) — max PHP 8.4
- Menu Image, Icons made easy — 100000+ active installs — 90/100 (123) — max PHP 8.4
- Duplicate Menu — 100000+ active installs — 92/100 (104) — max PHP 8.4
- Sticky Menu & Sticky Header — 90000+ active installs — 94/100 (758) — max PHP 8.4
Check your own WordPress site
Run a free passive scan now, or create a free account and install the WP Clinic plugin for a deep scan of your whole hosting account and AI-assisted repair.