{
    "title": "Max Mega Menu",
    "seo_title": "Max Mega Menu: review, recommended settings and limits",
    "h1": "Max Mega Menu",
    "description": "Max Mega Menu free or Pro: strengths, limitations, license pricing, recommended settings (mobile, keyboard, CSS) and patched vulnerabilities.",
    "lead": "Max Mega Menu turns WordPress menus into multi-column mega menus with widgets, blocks and an off-canvas mobile menu. Our take on the free and Pro versions, the settings to check for accessibility and mobile, and the patched vulnerabilities.",
    "language": "en",
    "locale": "en-US",
    "type": "plugin-sheet",
    "url": "https://www.wp-masquerade.com/features/camouflaged-plugins/max-mega-menu/",
    "canonical": "https://www.wp-masquerade.com/features/camouflaged-plugins/max-mega-menu/",
    "markdown": "https://www.wp-masquerade.com/features/camouflaged-plugins/max-mega-menu/index.md",
    "json": "https://www.wp-masquerade.com/features/camouflaged-plugins/max-mega-menu/index.json",
    "published": "2026-11-04T08:00:00+00:00",
    "modified": "2026-11-05T21:15:52+00:00",
    "site": {
        "name": "WP Masquerade",
        "url": "https://www.wp-masquerade.com/"
    },
    "translations": [
        {
            "language": "en",
            "hreflang": "en-US",
            "title": "Max Mega Menu",
            "url": "https://www.wp-masquerade.com/features/camouflaged-plugins/max-mega-menu/",
            "markdown": "https://www.wp-masquerade.com/features/camouflaged-plugins/max-mega-menu/index.md",
            "json": "https://www.wp-masquerade.com/features/camouflaged-plugins/max-mega-menu/index.json"
        },
        {
            "language": "fr",
            "hreflang": "fr-FR",
            "title": "Max Mega Menu",
            "url": "https://www.wp-masquerade.com/fr/fonctionnalites/extensions-camouflees/max-mega-menu/",
            "markdown": "https://www.wp-masquerade.com/fr/fonctionnalites/extensions-camouflees/max-mega-menu/index.md",
            "json": "https://www.wp-masquerade.com/fr/fonctionnalites/extensions-camouflees/max-mega-menu/index.json"
        },
        {
            "language": "es",
            "hreflang": "es-ES",
            "title": "Max Mega Menu",
            "url": "https://www.wp-masquerade.com/es/funcionalidades/plugins-camuflados/max-mega-menu/",
            "markdown": "https://www.wp-masquerade.com/es/funcionalidades/plugins-camuflados/max-mega-menu/index.md",
            "json": "https://www.wp-masquerade.com/es/funcionalidades/plugins-camuflados/max-mega-menu/index.json"
        },
        {
            "language": "de",
            "hreflang": "de-DE",
            "title": "Max Mega Menu",
            "url": "https://www.wp-masquerade.com/de/funktionen/getarnte-plugins/max-mega-menu/",
            "markdown": "https://www.wp-masquerade.com/de/funktionen/getarnte-plugins/max-mega-menu/index.md",
            "json": "https://www.wp-masquerade.com/de/funktionen/getarnte-plugins/max-mega-menu/index.json"
        },
        {
            "language": "it",
            "hreflang": "it-IT",
            "title": "Max Mega Menu",
            "url": "https://www.wp-masquerade.com/it/funzionalita/plugin-camuffati/max-mega-menu/",
            "markdown": "https://www.wp-masquerade.com/it/funzionalita/plugin-camuffati/max-mega-menu/index.md",
            "json": "https://www.wp-masquerade.com/it/funzionalita/plugin-camuffati/max-mega-menu/index.json"
        },
        {
            "language": "pt",
            "hreflang": "pt-BR",
            "title": "Max Mega Menu",
            "url": "https://www.wp-masquerade.com/pt/recursos/plugins-wordpress-camuflados/max-mega-menu/",
            "markdown": "https://www.wp-masquerade.com/pt/recursos/plugins-wordpress-camuflados/max-mega-menu/index.md",
            "json": "https://www.wp-masquerade.com/pt/recursos/plugins-wordpress-camuflados/max-mega-menu/index.json"
        },
        {
            "language": "nl",
            "hreflang": "nl-NL",
            "title": "Max Mega Menu",
            "url": "https://www.wp-masquerade.com/nl/functies/gecamoufleerde-plugins/max-mega-menu/",
            "markdown": "https://www.wp-masquerade.com/nl/functies/gecamoufleerde-plugins/max-mega-menu/index.md",
            "json": "https://www.wp-masquerade.com/nl/functies/gecamoufleerde-plugins/max-mega-menu/index.json"
        }
    ],
    "headings": [
        {
            "level": 1,
            "text": "Max Mega Menu"
        },
        {
            "level": 2,
            "text": "What Max Mega Menu does on your site"
        },
        {
            "level": 2,
            "text": "Which sites Max Mega Menu is a good fit for"
        },
        {
            "level": 2,
            "text": "Max Mega Menu strengths and limitations"
        },
        {
            "level": 3,
            "text": "Strengths"
        },
        {
            "level": 3,
            "text": "Limitations"
        },
        {
            "level": 2,
            "text": "The Max Mega Menu settings we recommend"
        },
        {
            "level": 2,
            "text": "Max Mega Menu security: few flaws, all needing an account"
        },
        {
            "level": 2,
            "text": "Max Mega Menu frequently asked questions",
            "id": "faq"
        }
    ],
    "body": "## The essentials\n\n- Best for catalogs and page-heavy sites that want a column mega menu without switching themes.\n- Main caveat: sticky menu, tabs, vertical menus and the WooCommerce cart require Pro.\n- Free; Pro starts at $39 tax included for one site, with 12 months of updates and support.\n\n## What Max Mega Menu does on your site\n\nMax Mega Menu doesn’t replace WordPress menus; it builds on them. You keep the Appearance > Menus screen, turn the plugin on for a menu location, and a blue “Mega Menu” button appears when you hover over each item. It opens the item’s settings: standard flyout or mega menu, a row and column layout, widgets, block patterns or HTML inside the panel, an icon, hidden text, a disabled link, or hiding the item on mobile.\n\nStyling lives in a “menu theme” editor (colors, fonts, spacing, panel width, mobile breakpoint). The plugin compiles those choices into a static stylesheet, saved by default in `/wp-content/uploads/maxmegamenu/`. You place the menu through automatic integration with a theme location, a block, a shortcode, a widget, or a native module for Elementor, Bricks, Breakdance and Divi. On phones it turns into an off-canvas or drop-down menu.\n\nThe developer is Presseli Ltd, a UK company. The free version handles a classic mega menu on its own; Max Mega Menu Pro, a separate add-on installed alongside it, adds the sticky menu, tabbed mega menus, vertical and accordion menus, a logo, a search box and the WooCommerce cart in the menu.\n\n![Diagram: Max Mega Menu works on visitors and bots, wordpress, database and files. Public traces: folder name (hidden with Pro); tag IDs (hidden with Pro); generated-file folders (hidden with Pro); CSS classes (still visible).](https://www.wp-masquerade.com/media/wpm-sheets/megamenu/diagram-en.svg?v=e9645ff1)\n\n## Which sites Max Mega Menu is a good fit for\n\nMax Mega Menu is about making a menu readable when it has outgrown a plain drop-down:\n\n- **Stores and catalogs**: categories laid out in columns, with images or short promos, under a single menu item.\n- **Service, nonprofit and public-sector sites**: lots of pages grouped into sections that visitors need to find at a glance.\n- **Sites whose theme has no free mega menu**: with Astra, GeneratePress or Kadence, the mega menu is part of the paid theme add-on.\n- **Multilingual sites**: with Polylang or WPML, each location card shows which menu is assigned to each language.\n\nIt’s not the best pick if your site is built with Elementor and the whole header is already designed there: an add-on pack like [ElementsKit](https://www.wp-masquerade.com/features/camouflaged-plugins/elementskit/) offers a mega menu whose content you build in Elementor.\n\n## Max Mega Menu strengths and limitations\n\n### Strengths\n\n- **WordPress menus stay the foundation.** Nothing to rebuild, and deleting the plugin’s data doesn’t delete your menus.\n- **A generous free version.** Column grid, widgets and blocks, theme editor, icons, off-canvas mobile menu and fonts from the WordPress Font Library.\n- **Built-in keyboard navigation.** Tab moves through the menu, Enter or Space opens a sub menu and Esc closes them.\n- **Light front-end code.** One static stylesheet per site and, according to the developer, under 2 KB of gzipped JavaScript.\n- **Many ways to place the menu.** Classic theme, block theme, Elementor, Bricks, Breakdance, Divi, shortcode or widget.\n\n### Limitations\n\n- **Sticky menu and tabs cost extra.** Sticky menu, tabs, vertical menus, logo, search and the WooCommerce cart all require Pro.\n- **jQuery on the front end.** The menu script depends on jQuery and hoverIntent, which load even if your theme doesn’t need them.\n- **Theme integration is sometimes manual.** Your theme may keep its own mobile button or styles; the developer publishes theme-by-theme instructions.\n- **Pro licenses need renewing.** Personal and Business include 12 months of updates and support; only Developer keeps updates for life.\n- **No customization help.** Support covers documented features, not recreating a menu you saw elsewhere or custom development.\n\n## The Max Mega Menu settings we recommend\n\nLabels match the English interface of the free version. A location’s settings open from its card under Mega Menu > Menu Locations.\n\n| Setting | Recommended value | Why |\n| --- | --- | --- |\n| **CSS Output**  Mega Menu > General Settings | Save to filesystem (default) | Browsers cache the file. If the uploads folder isn’t writable, the plugin switches to “Output in <head>” on its own. |\n| **Event**  Mega Menu > Menu Locations > location settings > Desktop | Hover Intent (default), or Click for large panels | Hover Intent waits for the pointer to settle, so panels don’t pop open as the mouse crosses the menu. |\n| **Unbind JavaScript Events**  Location settings > Advanced | Enabled (default) | Strips the theme’s own menu scripts from this location, a common cause of menus opening twice. |\n| **Container**  Location settings > Advanced | nav, if your theme doesn’t already wrap the menu in a nav element | The default is div; nav marks the navigation area for screen readers. Check the page source so you don’t nest two nav elements. |\n| **Active Menu Instance**  Location settings > Advanced | 0, or 1 if your theme outputs the location twice | Some themes print the same menu for desktop and mobile; the plugin should take over only one copy. |\n| **Responsive Breakpoint**  Mega Menu > Menu Themes > Mobile Menu | The width where your theme switches to mobile (768px by default) | Two different breakpoints leave a range of widths where the menu looks broken. |\n| **Keyboard Highlight Outline**  Mega Menu > Menu Themes > General Settings | A color that contrasts with the background, 3px (default) | The outline shows where focus is while visitors navigate with the keyboard. |\n\n- Move through the menu with Tab, open a sub menu with Enter and close it with Esc.\n- Shrink the window below the breakpoint: only one mobile menu button should appear.\n- If a theme or color change doesn’t show up, use Mega Menu > Tools > Clear CSS Cache.\n- With Pro, make sure the license key is activated: without it, the Pro add-on stops receiving updates.\n\n## Max Mega Menu security: few flaws, all needing an account\n\nThe WPScan and Patchstack databases list two public vulnerabilities in the free version, both medium severity and both requiring a logged-in account:\n\n- **CVE-2024-28003, fixed in 3.3.1**: a missing authorization check, exploitable with a low-privilege account (CVSS 5.4 according to Patchstack). The 3.3.1 changelog notes a nonce check added to the preview URL, reported by Patchstack.\n- **CVE-2017-18525, fixed in 2.4**: an [XSS vulnerability](https://www.wp-masquerade.com/glossary/xss/) limited to logged-in users.\n\nThe main risk is an outdated install: turn on automatic updates for the plugin (see our guide to automatic plugin updates) and keep your Pro license active if you use it. Bots spot the plugin from its folder, its files and its CSS classes (see [how bots recognize a WordPress site](https://www.wp-masquerade.com/wordpress-fingerprinting-detection/)). WP Masquerade Pro renames the plugin folder, the handles of its scripts and styles and the `/wp-content/uploads/maxmegamenu/` folder of its stylesheet, but the `mega-menu-*` classes remain visible: that makes the plugin harder to spot without replacing updates.\n\n## Max Mega Menu frequently asked questions\n\n**Does Max Mega Menu work with a block theme?**\n\nYes. Create a location under Mega Menu > Menu Locations, assign a menu to it, then add the Max Mega Menu block to your header in the Site Editor. The plugin also brings back the Appearance > Menus screen, which block themes hide.\n\n**Do I need Pro for a sticky menu?**\n\nYes: the sticky menu, tabbed mega menus and vertical or accordion menus are Pro-only features.\n\n**How much does Max Mega Menu Pro cost?**\n\nThe official pricing page lists $39 for one site, $69 for five sites and $149 for 99 sites, taxes included. The first two licenses include 12 months of updates and support; the Developer license keeps updates for life, with 12 months of support.\n\n**Why do I see two mobile menu buttons?**\n\nYour theme shows its own button next to the Max Mega Menu one. The official documentation has a page on this exact case, with integration instructions for specific themes.\n\n**What happens to my menus if I deactivate the plugin?**\n\nYour WordPress menus stay intact and go back to your theme’s styling. To also remove the plugin’s settings, menu themes and widgets, use Mega Menu > Tools > Plugin Data, which can’t be undone.\n\n## Key facts\n\n- Category: Utilities\n- Vendor: Presseli Ltd\n- Price: Free; Pro from $39 tax included for one site, with 12 months of updates and support\n- Active installations (wordpress.org): 300 000+\n- Version: 3.10.9\n- Official page: https://wordpress.org/plugins/megamenu/\n\n## What WP Masquerade hides\n\n- Handled by WP Masquerade Pro only\n- With Pro: folder name, tag IDs, generated-file folders\n- Still visible: CSS classes",
    "catalog": "megamenu",
    "essentials": [
        "Best for catalogs and page-heavy sites that want a column mega menu without switching themes.",
        "Main caveat: sticky menu, tabs, vertical menus and the WooCommerce cart require Pro.",
        "Free; Pro starts at $39 tax included for one site, with 12 months of updates and support."
    ],
    "format": "application/json"
}