Vulnerabilities in Custom Menu Plugin