Lucene search

CVE-2023-0554

🗓️ 27 Jan 2023 21:11:15Reported by [email protected]Type

The Quick Restaurant Menu plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.0.2

Reporter	Title	Published	Views	Family All 8
Prion	Cross site request forgery (csrf)	27 Jan 202321:15	–	prion
CVE	CVE-2023-0554	27 Jan 202321:15	–	cve
Cvelist	CVE-2023-0554	27 Jan 202320:28	–	cvelist
Vulnrichment	CVE-2023-0554	27 Jan 202320:28	–	vulnrichment
WPVulnDB	Quick Restaurant Menu < 2.1.0 - Menu Items Update via CSRF	27 Jan 202300:00	–	wpvulndb
Patchstack	WordPress Quick Restaurant Menu Plugin <= 2.0.2 is vulnerable to Cross Site Request Forgery (CSRF)	30 Jan 202300:00	–	patchstack
0day.today	WordPress Quick Restaurant 2.0.2 XSS / CSRF / IDOR / Missing Authorization Vulnerabilities	3 Feb 202300:00	–	zdt
Wordfence Blog	Multiple Vulnerabilities Patched in Quick Restaurant Menu Plugin	1 Feb 202316:07	–	wordfence

Nvd

Node

thingsforrestaurants quick_restaurant_menuRange<2.1.0wordpress

Source	Link
plugins	www.plugins.trac.wordpress.org/changeset/2851871/quick-restaurant-menu/trunk
plugins	www.plugins.trac.wordpress.org/browser/quick-restaurant-menu/tags/2.0.2/includes/admin/ajax-functions.php
wordfence	www.wordfence.com/threat-intel/vulnerabilities/id/bfc7c214-8d76-453c-a05d-682aa425b06e

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

27 Jan 2023 21:15Current

7.3High risk

Vulners AI Score7.3

CVSS34.3

EPSS0.00088