Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

5 records

Vendor: nicheaddons Component: Restaurant & Cafe Addon For Elementor Clear all filters
TI-2024-36404 CVE-2024-54316 · GHSA-m2x6-82qg-2f4p

WordPress Restaurant & Cafe Addon for Elementor plugin <= 1.5.8 - Cross Site Scripting (XSS) vulnerability

Priority LOW 29

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in nicheaddons Restaurant & Cafe Addon for Elementor restaurant-cafe-addon-for-elementor allows DOM-Based XSS.This issue…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00409 Published 2024-12-13 No fix listed CWE-79
TI-2023-25934 CVE-2023-47826 · GHSA-gwrx-cjv8-qj99

WordPress Restaurant & Cafe Addon for Elementor plugin <= 1.5.3 - Broken Access Control vulnerability

Priority MEDIUM 49

Missing Authorization vulnerability in NicheAddons Restaurant & Cafe Addon for Elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Restaurant & Cafe Addon for Elementor: f…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00489 Published 2024-12-09 No fix listed CWE-862
TI-2024-09992 CVE-2024-10780 · GHSA-w9h3-3453-p323

Restaurant & Cafe Addon for Elementor <= 1.5.9 - Authenticated (Contributor+) Post Disclosure

Priority LOW 20

The Restaurant & Cafe Addon for Elementor plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 1.5.9 via the 'narestaurant_elementor_template' shortcode due to insufficient res…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00387 Published 2024-11-28 No fix listed CWE-639
TI-2024-34496 CVE-2024-51581 · GHSA-rh3g-vww5-3jr6

WordPress Restaurant & Cafe Addon for Elementor plugin <= 1.5.6 - Cross Site Scripting (XSS) vulnerability

Priority LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in nicheaddons Restaurant & Cafe Addon for Elementor restaurant-cafe-addon-for-elementor allows Stored XSS.This issue aff…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.0027 Published 2024-11-10 No fix listed CWE-79
TI-2024-29621 CVE-2024-44032 · GHSA-57q5-6gjh-59m6

WordPress Restaurant & Cafe Addon for Elementor plugin <= 1.5.5 - Cross Site Scripting (XSS) vulnerability

Priority LOW 29

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in nicheaddons Restaurant & Cafe Addon for Elementor restaurant-cafe-addon-for-elementor allows Stored XSS.This issue aff…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00313 Published 2024-10-06 No fix listed CWE-79