Vulnerabilities

TI-2023-18349 CVE-2023-36510 · GHSA-8f38-9x5m-gx9w

WordPress ReDi Restaurant Reservation plugin <= 23.0211 - Broken Access Control vulnerability

LOW 39

Missing Authorization vulnerability in Reservation Diary ReDi Restaurant Reservation allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ReDi Restaurant Reservation: from n/a throug…

CVSS 3.1HIGH 7.3 Network No auth No interaction EPSS 0.00518 Published 2024-12-13 No fix listed CWE-862

TI-2024-25971 CVE-2024-38737 · GHSA-j5vp-mc48-6xm9

WordPress ReDi Restaurant Reservation plugin <= 24.0422 - Broken Access Control vulnerability

LOW 24

Missing Authorization vulnerability in Reservation Diary ReDi Restaurant Reservation allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects ReDi Restaurant Reservation: from n/a through 24.042…

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00305 Published 2024-11-01 No fix listed CWE-862

TI-2024-20757 CVE-2024-31385 · GHSA-5q7f-7r7p-8g8m

WordPress ReDi Restaurant Reservation plugin <= 24.0128 - Cross Site Request Forgery (CSRF) vulnerability

LOW 19

Cross-Site Request Forgery (CSRF) vulnerability in Reservation Diary ReDi Restaurant Reservation.This issue affects ReDi Restaurant Reservation: from n/a through 24.0128.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.002 Published 2024-04-15 No fix listed CWE-352

TI-2024-20675 CVE-2024-31299 · GHSA-pw2h-m7pw-m9c6

WordPress ReDi Restaurant Reservation plugin <= 24.0128 - Cross Site Request Forgery (CSRF) to XSS vulnerability

LOW 31

Cross-Site Request Forgery (CSRF) vulnerability in Reservation Diary ReDi Restaurant Reservation allows Cross-Site Scripting (XSS).This issue affects ReDi Restaurant Reservation: from n/a through 24.0128.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00269 Published 2024-04-10 No fix listed CWE-352

TI-2024-19582 CVE-2024-29806 · GHSA-7ccw-86xw-4rp5

WordPress ReDi Restaurant Reservation plugin <= 24.0128 - Reflected Cross Site Scripting (XSS) vulnerability

LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Reservation Diary ReDi Restaurant Reservation allows Reflected XSS.This issue affects ReDi Restaurant Reservation: fro…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00372 Published 2024-03-27 No fix listed CWE-79

TI-2021-06591 CVE-2021-24299 · GHSA-7v76-9gr6-p8jh

ReDi Restaurant Reservations < 21.0426 - Unauthenticated Stored Cross-Site Scripting (XSS)

LOW 36

The ReDi Restaurant Reservation WordPress plugin before 21.0426 provides the functionality to let users make restaurant reservations.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.05501 Published 2021-05-17 Fixed in 21.0426 CWE-79