Fivestarplugins Five Star Restaurant Menu
6 CVEs affecting Fivestarplugins Five Star Restaurant Menu. Latest disclosed: 2024-06-05. Critical: 2, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-5340 | Critical | 9.8 | 2023-11-20 | The Five Star Restaurant Menu and Food Ordering WordPress plugin before 2.4.11 unserializes user input via an AJAX action available to unauthenticated users, a… |
CVE-2020-29045 | Critical | 9.8 | 2021-03-11 | The food-and-drink-menu plugin through 2.2.0 for WordPress allows remote attackers to execute arbitrary code because of an unserialize operation on the fdm_car… |
CVE-2023-34017 | High | 7.1 | 2023-07-25 | Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in FiveStarPlugins Five Star Restaurant Reservations plugin <= 2.6.7 versions. |
CVE-2024-24838 | Medium | 6.5 | 2024-02-05 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Five Star Plugins Five Star Restaurant Reviews allows Sto… |
CVE-2024-5459 | Medium | 4.3 | 2024-06-05 | The Restaurant Menu and Food Ordering plugin for WordPress is vulnerable to unauthorized creation of data due to a missing capability check on 'add_section', '… |
CVE-2023-37985 | Medium | 4.3 | 2023-07-17 | Cross-Site Request Forgery (CSRF) vulnerability in FiveStarPlugins Restaurant Menu and Food Ordering plugin <= 2.4.6 versions. |