Read the docs

alejandropascual

Records6All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9

Exploited now

alejandropascual records in CISA KEV

No alejandropascual vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Quick Restaurant Menu 4 records LOW Quick Restaurant Reservations 2 records MEDIUM

Records

6 records

TI-2023-00526 CVE-2023-0555 · GHSA-76qp-hmwj-8f8f

Quick Restaurant Menu <= 2.0.2 - Missing Authorization

Priority LOW 36

The Quick Restaurant Menu plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on its AJAX actions in versions up to, and including, 2.0.2.

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.00608 Published 2023-01-27 No fix listed CWE-862
TI-2023-00521 CVE-2023-0550 · GHSA-wrf9-6jf3-2w3c

Quick Restaurant Menu <= 2.0.2 - Insecure Direct Object Reference

Priority LOW 36

The Quick Restaurant Menu plugin for WordPress is vulnerable to Insecure Direct Object Reference in versions up to, and including, 2.0.2.

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.00657 Published 2023-01-27 No fix listed CWE-639
TI-2023-00525 CVE-2023-0554 · GHSA-6hpw-2974-gxxw

Quick Restaurant Menu <= 2.0.2 - Cross-Site Request Forgery

Priority LOW 35

The Quick Restaurant Menu plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.0.2.

CVSS 3.1HIGH 8.1 Network No auth User interaction EPSS 0.00372 Published 2023-01-27 No fix listed CWE-352
TI-2022-12272 CVE-2022-29923 · GHSA-w2fx-43f2-2mgq

Cross-site scripting in alejandropascual Quick Restaurant Reservations

Priority LOW 27

Cross-site Scripting (XSS) vulnerability in ThingsForRestaurants Quick Restaurant Reservations (WordPress plugin) allows Reflected XSS.This issue affects Quick Restaurant Reservations (WordPress plugin): from n/a through…

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00608 Published 2022-07-20 No fix listed CWE-79
TI-2023-00524 CVE-2023-0553 · GHSA-vm2w-gxx4-c9vc

Quick Restaurant Menu <= 2.0.2 - Authenticated (Administrator+) Cross-Site Scripting

Priority LOW 23

The Quick Restaurant Menu plugin for WordPress is vulnerable to Stored Cross-Site Scripting via its settings parameters in versions up to, and including, 2.0.2 due to insufficient input sanitization and output escaping.

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.0056 Published 2023-01-27 No fix listed CWE-79
Open these records in search →