Five Star Restaurant Menu
Approved changes feed: RSS · Atom
cpe:2.3:a:fivestarplugins:five_star_restaurant_menu:*:*:*:*:*:wordpress:*:*
part: a version: * update: *
| Vendor | Fivestarplugins (7ae7f715-9461-5ae7-821a-4115dfc479ec) |
|---|---|
| Product | Five Star Restaurant Menu (abf81d40-78a2-56b6-9121-ffaad69615e4) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | wordpress |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-5459 |
vulnerable | 2026-06-08 06:56:16.081499 |
Restaurant Menu and Food Ordering <= 2.4.16 - Missing Authorization to Menu Creation
MEDIUM (4.3)
The Restaurant Menu and Food Ordering plugin for WordPress is vulnerable to unauthorized creation of data due to a missing capability check on 'add_section', 'add_menu', 'add_menu_item', and 'add_menu_page' functions in all versions up to, and including, 2.4.16. This makes it possible for authenticated attackers, with Subscriber-level access and above, to create menu sections, menus, food items, and new menu pages.
Published: 2024-06-05T12:45:38.670Z
Updated: 2026-04-08T16:33:02.164Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-24838 |
vulnerable | 2026-06-08 06:29:41.877855 |
WordPress Five Star Restaurant Reviews Plugin <= 2.3.5 is vulnerable to Cross Site Scripting (XSS)
MEDIUM (6.5)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Five Star Plugins Five Star Restaurant Reviews allows Stored XSS.This issue affects Five Star Restaurant Reviews: from n/a through 2.3.5.
Published: 2024-02-05T06:35:38.353Z
Updated: 2026-04-28T16:09:10.640Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-5340 |
vulnerable | 2026-06-08 06:19:43.242539 |
Five Star Restaurant Menu and Food Ordering < 2.4.11 - Unauthenticated PHP Object Injection
The Five Star Restaurant Menu and Food Ordering WordPress plugin before 2.4.11 unserializes user input via an AJAX action available to unauthenticated users, allowing them to perform PHP Object Injection when a suitable gadget is present on the blog.
Published: 2023-11-20T18:55:01.256Z
Updated: 2024-11-21T19:11:43.377Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-37985 |
vulnerable | 2026-06-08 06:08:16.636321 |
WordPress Five Star Restaurant Menu Plugin <= 2.4.6 is vulnerable to Cross Site Request Forgery (CSRF)
MEDIUM (4.3)
Cross-Site Request Forgery (CSRF) vulnerability in FiveStarPlugins Restaurant Menu and Food Ordering plugin <= 2.4.6 versions.
Published: 2023-07-17T15:04:41.524Z
Updated: 2026-04-28T16:08:33.144Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-34017 |
vulnerable | 2026-06-08 06:06:24.212220 |
WordPress Five Star Restaurant Reservations Plugin <= 2.6.7 is vulnerable to Cross Site Scripting (XSS)
HIGH (7.1)
Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in FiveStarPlugins Five Star Restaurant Reservations plugin <= 2.6.7 versions.
Published: 2023-07-25T13:33:06.245Z
Updated: 2026-04-28T16:08:26.994Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-29045 |
vulnerable | 2026-06-08 05:24:57.424353 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.