Is side-menu (WordPress plugin) vulnerable?

WordPress side-menu has 3 known advisories in the phpwarden feed. Feed 2026.10.28.3, updated 2026-10-28.

3advisories

0critical

0on CISA KEV

0no fix recorded

CVE	Title	Severity	CVSS	Affected	Fixed in
CVE-2021-24521	The Side Menu Lite – add sticky fixed buttons WordPress plugin before 2.2.1 does not properly sanitize input values from the browser when bu	high	7.2	`<2.2.1`	`2.2.1`
CVE-2021-24348	The menu delete functionality of the Side Menu – add fixed side buttons WordPress plugin before 3.1.5, available to Administrator users take	high	7.2	`<3.1.5`	`3.1.5`
CVE-2021-24580	The Side Menu Lite WordPress plugin before 2.2.6 does not sanitise user input from the List page in the admin dashboard before using it in S	high	8.8	`<2.2.6`	`2.2.6`

Am I affected?

Find out in one command. phpwarden checks your WordPress install against this advisory and 20,000+ others, ranked by real-world exploitation (CISA KEV + EPSS). Free, offline, open data.

# one-time install
pip install phpwarden

# then
phpwarden wordpress /var/www/html

Or keep it checked automatically with the GitHub Action or a nightly cron; see WordPress docs.

Install docs How findings are ranked

A version is vulnerable when it falls inside an affected range and below the fixed version. phpwarden applies these ranges to the exact versions in your lockfile or install, so you only see what applies to you.