Vulnerabilities

TI-2024-05073 CVE-2024-5459 · GHSA-q9gh-wgf2-5fp3

Restaurant Menu and Food Ordering <= 2.4.16 - Missing Authorization to Menu Creation

LOW 20

The Restaurant Menu and Food Ordering plugin for WordPress is vulnerable to unauthorized creation of data due to a missing capability check on 'add_section', 'add_menu', 'add_menu_item', and 'add_menu_page' functions in…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00365 Published 2024-06-05 No fix listed CWE-862

TI-2024-16355 CVE-2024-24838 · GHSA-w6f5-cfrr-rg5r

WordPress Five Star Restaurant Reviews Plugin <= 2.3.5 is vulnerable to Cross Site Scripting (XSS)

LOW 29

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Five Star Plugins Five Star Restaurant Reviews allows Stored XSS.This issue affects Five Star Restaurant Reviews: from…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00309 Published 2024-02-05 No fix listed CWE-79

TI-2023-04913 CVE-2023-5340 · GHSA-v88m-92x2-qxm5

Five Star Restaurant Menu and Food Ordering < 2.4.11 - Unauthenticated PHP Object Injection

HIGH 82

The Five Star Restaurant Menu and Food Ordering WordPress plugin before 2.4.11 unserializes user input via an AJAX action available to unauthenticated users, allowing them to perform PHP Object Injection when a suitable…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01245 Published 2023-11-20 Fixed in 2.4.11 CWE-74

TI-2023-16883 CVE-2023-34017 · GHSA-jmw5-hq6h-r7gj

WordPress Five Star Restaurant Reservations Plugin <= 2.6.7 is vulnerable to Cross Site Scripting (XSS)

LOW 31

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in FiveStarPlugins Five Star Restaurant Reservations plugin <= 2.6.7 versions.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00406 Published 2023-07-25 No fix listed CWE-79

TI-2023-19417 CVE-2023-37985 · GHSA-vgq4-q6x5-pr48

WordPress Five Star Restaurant Menu Plugin <= 2.4.6 is vulnerable to Cross Site Request Forgery (CSRF)

LOW 38

Cross-Site Request Forgery (CSRF) vulnerability in FiveStarPlugins Restaurant Menu and Food Ordering plugin <= 2.4.6 versions.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00256 Published 2023-07-17 No fix listed CWE-352

TI-2020-17543 CVE-2020-29045 · GHSA-467c-6whc-qp44

The food-and-drink-menu plugin through 2.2.0 for WordPress allows remote attackers to…

HIGH 66

The food-and-drink-menu plugin through 2.2.0 for WordPress allows remote attackers to execute arbitrary code because of an unserialize operation on the fdm_cart cookie in load_cart_from_cookie in includes/class-cart-mana…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.30798 Published 2021-03-11 No fix listed CWE-502