PLUGIN SECURITY
Is Menu Image safe?
Adds an image or icon in the menu items. You can choose the position of the image (after, before, above, below) or even hide the menu item title.
What this plugin does
- Slug:
menu-image - Author: Rui Guerreiro
- 100000+ active installs
- 90/100 rating (123 reviews on wordpress.org)
- 2114431 all-time downloads
- On WordPress.org since 2013-05-23
iconsimagemenunav menunavigation
Maintenance status
- Latest known version: 3.13
- Last updated: 2025-07-20 11:15pm GMT
- Tested up to WordPress: 6.7.7
- Max supported PHP (analyzed): 8.4
Known vulnerabilities
4 known CVEs on file for Menu Image. Reported between 2022 and 2026.
| CVE | Vulnerability | Type | Severity | Affected | Fixed in | Published | Status |
|---|---|---|---|---|---|---|---|
| CVE-2024-13362 | Menu Image, Icons made easy [menu-image] < 3.13 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | Medium 6.1 | < 3.13 | 3.13 | 2026-04-30 | ✓ fixed in latest |
| CVE-2023-50826 | Menu Image, Icons made easy [menu-image] < 3.11 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | Medium 5.9 | < 3.11 | 3.11 | 2023-12-19 | ✓ fixed in latest |
| CVE-2023-33999 | Menu Image, Icons made easy [menu-image] < 3.10 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | High 7.1 | < 3.10 | 3.10 | 2023-07-18 | ✓ fixed in latest |
| CVE-2022-0450 | Menu Image, Icons made easy [menu-image] < 3.0.8 | Improper Encoding or Escaping of Output | Medium 5.4 | < 3.0.8 | 3.0.8 | 2022-03-07 | ✓ fixed in latest |
| — | Menu Image, Icons made easy [menu-image] < 3.0.6 | Missing Authorization | Medium 6.3 | < 3.0.6 | 3.0.6 | 2022-03-04 | ✓ fixed in latest |
| — | Menu Image, Icons made easy [menu-image] < 3.0.6 | — | Unknown | < 3.0.6 | 3.0.6 | 2022-02-28 | ✓ fixed in latest |
| — | Menu Image, Icons made easy [menu-image] < 3.0.6 | — | Unknown | < 3.0.6 | 3.0.6 | 2022-02-28 | ✓ fixed in latest |
| — | Unauthorised AJAX Calls via Freemius | — | Unknown | < 3.0.6 | 3.0.6 | — | ✓ fixed in latest |
How to fix it
Keep Menu Image updated — 3.13 is the latest version on wordpress.org, and each CVE above lists the exact release that fixed it ("Fixed in").
This is the plugin's full known vulnerability history, not a scan of any specific installation — run a free scan of your own site to check your exact installed version.
Safer / more established alternatives
- Skyboot Custom Icons for Elementor – Elementor Icons library – 14300+ Icons — 200000+ active installs — 100/100 (19) — max PHP 8.4
- Imsanity — 200000+ active installs — 98/100 (292) — max PHP 8.4
- Firelight Lightbox — 200000+ active installs — 96/100 (355) — max PHP 8.4
- Responsive Lightbox & Gallery — 100000+ active installs — 98/100 (1999) — max PHP 8.4
- Simple Lightbox — 100000+ active installs — 86/100 (239) — max PHP <8.0
Check your own WordPress site
Run a free passive scan now, or create a free account and install the WP Clinic plugin for a deep scan of your whole hosting account and AI-assisted repair.