Vulnerability in Food Menu

CVE-2026-13328

The Food Menu WordPress plugin before 6.0.2 does not perform any capability or ownership check on its reservation-status update action, which is also exposed to unauthenticated users and gated only by a nonce that is publicly available to…

Affected products

  • Unknown Food Menu — versions 0

References