PT-2026-71389

Name of the Vulnerable Software and Affected Versions Food Menu versions prior to 6.0.2 Description An issue exists where the plugin fails to perform capability or ownership checks on the reservation-status update action. This action is exposed to unauthenticated users and is protected only by a...

WordPress Homey plugin <= 2.4.4 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Reservation & Post Deletion vulnerability

Missing Authorization to Authenticated Subscriber+ Arbitrary Reservation & Post Deletion vulnerability discovered by a00n in WordPress Theme Homey versions = 2.4.4...