Lucene search
+L

189 matches found

Patchstack
Patchstack
•added 2026/09/17 3:23 p.m.•6 views

WordPress Five Star Restaurant Reservations plugin < 2.7.23 - Unauthenticated Payment Bypass and Booking Confirmation via IDOR vulnerability

Unauthenticated Payment Bypass and Booking Confirmation via IDOR vulnerability discovered by Muni Nitish Kumar Yaddala in WordPress Plugin Five Star Restaurant Reservations versions 2.7.23...

5.3CVSS5.8AI score0.00163EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/06 12:00 a.m.•1 views

CVE-2026-15147: Insufficient Verification of Data Authenticity

The Five Star Restaurant Reservations WordPress plugin before 2.7.23 does not verify the authenticity of incoming payment notifications, failing to validate the payment recipient, amount, and status or to bind the notification to the intended booking, allowing unauthenticated attackers to mark...

5.3CVSS5.9AI score0.00163EPSS
SaveExploits0References3
NVD
NVD
•added 2026/08/02 6:16 a.m.•13 views

CVE-2026-15151

The Five Star Restaurant Reservations WordPress plugin before 2.7.23 does not perform a capability check on one of its AJAX actions, allowing users with the lowest booking-management role which by default cannot access the Five Star Restaurant Reservations WordPress plugin before 2.7.23's setting...

7.5CVSS0.00394EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/08/02 6:00 a.m.•49 views

CVE-2026-15151 Five Star Restaurant Reservations < 2.7.23 - Booking Manager+ Missing Authorization via rtb_reset_notifications

The Five Star Restaurant Reservations WordPress plugin before 2.7.23 does not perform a capability check on one of its AJAX actions, allowing users with the lowest booking-management role which by default cannot access the Five Star Restaurant Reservations WordPress plugin before 2.7.23's setting...

0.00394EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2026/08/02 6:00 a.m.•11 views

WordPress Five Star Restaurant Reservations plugin < 2.7.23 - Booking Manager+ Missing Authorization vulnerability

Booking Manager+ Missing Authorization vulnerability discovered by Minar in WordPress Plugin Five Star Restaurant Reservations versions 2.7.23...

7.5CVSS5.5AI score0.00394EPSS
SaveExploits0References1Affected Software1
CVE
CVE
•added 2026/08/02 6:00 a.m.•56 views

CVE-2026-15151

The Five Star Restaurant Reservations WordPress plugin, in versions before 2.7.23 , contains a missing authorization vulnerability. The plugin fails to perform a capability check on one of its AJAX actions, specifically related to rtb_reset_notifications. This flaw allows users with the lowest bo...

7.5CVSS5.5AI score0.00394EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/08/02 6:00 a.m.•15 views

CVE-2026-15151

The Five Star Restaurant Reservations WordPress plugin before 2.7.23 does not perform a capability check on one of its AJAX actions, allowing users with the lowest booking-management role which by default cannot access the Five Star Restaurant Reservations WordPress plugin before 2.7.23's setting...

5.5AI score0.00394EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/02 12:00 a.m.•2 views

CVE-2026-15151: Improper Access Control

The Five Star Restaurant Reservations WordPress plugin before 2.7.23 does not perform a capability check on one of its AJAX actions, allowing users with the lowest booking-management role which by default cannot access the Five Star Restaurant Reservations WordPress plugin before 2.7.23's setting...

7.5CVSS5.8AI score0.00394EPSS
SaveExploits0References2
NVD
NVD
•added 2026/07/02 12:17 p.m.•21 views

CVE-2026-27436

Editor Arbitrary Code Execution in Five Star Business Profile and Schema = 2.3.19 versions...

9.1CVSS0.00665EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/07/02 11:15 a.m.•25 views

EUVD-2026-41338

Editor Arbitrary Code Execution in Five Star Business Profile and Schema = 2.3.19 versions...

9.1CVSS5.9AI score0.00665EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/07/02 11:15 a.m.•17 views

CVE-2026-27436 WordPress Five Star Business Profile and Schema plugin <= 2.3.19 - Arbitrary Code Execution vulnerability

Editor Arbitrary Code Execution in Five Star Business Profile and Schema = 2.3.19 versions...

9.1CVSS5.9AI score0.00665EPSS
SaveExploits0References1
CVE
CVE
•added 2026/07/02 11:15 a.m.•59 views

CVE-2026-27436

The CVE covers WordPress plugin Five Star Business Profile and Schema (versions

9.1CVSS5.9AI score0.00665EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/07/02 11:15 a.m.•15 views

CVE-2026-27436

Editor Arbitrary Code Execution in Five Star Business Profile and Schema = 2.3.19 versions...

9.1CVSS5.9AI score0.00665EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/07/02 11:15 a.m.•53 views

CVE-2026-27436 WordPress Five Star Business Profile and Schema plugin <= 2.3.19 - Arbitrary Code Execution vulnerability

Editor Arbitrary Code Execution in Five Star Business Profile and Schema = 2.3.19 versions...

9.1CVSS0.00665EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/07/02 12:00 a.m.•29 views

PT-2026-54982

Editor Arbitrary Code Execution in Five Star Business Profile and Schema = 2.3.19 versions...

9.1CVSS5.9AI score0.00665EPSS
SaveExploits0References3
Patchstack
Patchstack
•added 2026/06/30 2:13 p.m.•16 views

WordPress Five Star Business Profile and Schema plugin <= 2.3.19 - Arbitrary Code Execution vulnerability

Arbitrary Code Execution vulnerability discovered by daroo in WordPress Plugin Five Star Business Profile and Schema versions = 2.3.19...

9.1CVSS5.9AI score0.00665EPSS
SaveExploits0Affected Software1
NVD
NVD
•added 2026/06/26 3:16 p.m.•19 views

CVE-2026-54835

Unauthenticated Broken Access Control in Five Star Restaurant Menu = 2.5.2 versions...

7.5CVSS0.00346EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/06/26 2:52 p.m.•20 views

EUVD-2026-39679

Unauthenticated Broken Access Control in Five Star Restaurant Menu = 2.5.2 versions...

7.5CVSS5.8AI score0.00346EPSS
SaveExploits0References1
CVE
CVE
•added 2026/06/26 2:52 p.m.•38 views

CVE-2026-54835

CVE-2026-54835 concerns the WordPress plugin Five Star Restaurant Menu (versions

7.5CVSS5.8AI score0.00346EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/06/26 2:52 p.m.•21 views

CVE-2026-54835 WordPress Five Star Restaurant Menu plugin <= 2.5.2 - Broken Access Control vulnerability

Unauthenticated Broken Access Control in Five Star Restaurant Menu = 2.5.2 versions...

7.5CVSS5.8AI score0.00346EPSS
SaveExploits0References1
Rows per page
Query Builder