CVE-2026-59559

The RT Mega Menu plugin for Elementor and Gutenberg versions up to 1.5.1 is vulnerable to a Subscriber Cross Site Scripting (XSS) attack, which could allow attackers to inject malicious scripts into web pages viewed by users with subscriber-level access. This vulnerability poses a medium risk, as it could lead to unauthorized actions or data exposure for affected sites. Website administrators using this plugin should prioritize patching or upgrading to mitigate potential exploitation.