Vulnerability in Restaurant Cafeteria

CVE-2025-15445

The Restaurant Cafeteria WordPress theme through 0.4.6 exposes insecure admin-ajax actions without nonce or capability checks, allowing any logged-in user, like subscriber, to perform privileged operations. An attacker can install and acti…

EPSS: 0.000 (5.2th percentile) — read the EPSS interpretation.

Affected products

  • Unknown Restaurant Cafeteria — versions 0

References