WordPress Five Star Restaurant Reviews plugin < 2.3.14 - Reflected XSS vulnerability

Reflected XSS vulnerability discovered by V1T in WordPress Plugin Five Star Restaurant Reviews versions 2.3.14...

CVE-2026-92412

The Five Star Restaurant Reviews WordPress plugin before 2.3.14 does not properly escape a user-supplied value before outputting it into an HTML tag, allowing unauthenticated attackers to inject arbitrary web script that runs in the browser of anyone tricked into submitting a crafted request,...

CVE-2026-92412 Five Star Restaurant Reviews < 2.3.14 - Reflected XSS

The Five Star Restaurant Reviews WordPress plugin before 2.3.14 does not properly escape a user-supplied value before outputting it into an HTML tag, allowing unauthenticated attackers to inject arbitrary web script that runs in the browser of anyone tricked into submitting a crafted request,...

CVE-2026-92412

The Five Star Restaurant Reviews WordPress plugin (versions before 2.3.14 ) contains a Reflected Cross-Site Scripting (XSS) vulnerability. The root cause is the failure to properly escape user-supplied values before they are outputted into an HTML tag. This allows unauthenticated attackers to inj...

CVE-2026-92412 Five Star Restaurant Reviews < 2.3.14 - Reflected XSS

The Five Star Restaurant Reviews WordPress plugin before 2.3.14 does not properly escape a user-supplied value before outputting it into an HTML tag, allowing unauthenticated attackers to inject arbitrary web script that runs in the browser of anyone tricked into submitting a crafted request,...

EUVD-2026-90517

The Five Star Restaurant Reviews WordPress plugin before 2.3.14 does not properly escape a user-supplied value before outputting it into an HTML tag, allowing unauthenticated attackers to inject arbitrary web script that runs in the browser of anyone tricked into submitting a crafted request,...

WordPress Five Star Restaurant Reservations plugin < 2.7.23 - Unauthenticated Payment Bypass and Booking Confirmation via IDOR vulnerability

Unauthenticated Payment Bypass and Booking Confirmation via IDOR vulnerability discovered by Muni Nitish Kumar Yaddala in WordPress Plugin Five Star Restaurant Reservations versions 2.7.23...

CVE-2026-15147: Insufficient Verification of Data Authenticity

The Five Star Restaurant Reservations WordPress plugin before 2.7.23 does not verify the authenticity of incoming payment notifications, failing to validate the payment recipient, amount, and status or to bind the notification to the intended booking, allowing unauthenticated attackers to mark...

CVE-2026-15151 Five Star Restaurant Reservations < 2.7.23 - Booking Manager+ Missing Authorization via rtb_reset_notifications

The Five Star Restaurant Reservations WordPress plugin before 2.7.23 does not perform a capability check on one of its AJAX actions, allowing users with the lowest booking-management role which by default cannot access the Five Star Restaurant Reservations WordPress plugin before 2.7.23's setting...

WordPress Five Star Restaurant Reservations plugin < 2.7.23 - Booking Manager+ Missing Authorization vulnerability

Booking Manager+ Missing Authorization vulnerability discovered by Minar in WordPress Plugin Five Star Restaurant Reservations versions 2.7.23...

CVE-2026-15151: Improper Access Control

The Five Star Restaurant Reservations WordPress plugin before 2.7.23 does not perform a capability check on one of its AJAX actions, allowing users with the lowest booking-management role which by default cannot access the Five Star Restaurant Reservations WordPress plugin before 2.7.23's setting...

EUVD-2026-39679

Unauthenticated Broken Access Control in Five Star Restaurant Menu = 2.5.2 versions...

CVE-2026-54835

CVE-2026-54835 concerns the WordPress plugin Five Star Restaurant Menu (versions

CVE-2026-54835 WordPress Five Star Restaurant Menu plugin <= 2.5.2 - Broken Access Control vulnerability

Unauthenticated Broken Access Control in Five Star Restaurant Menu = 2.5.2 versions...

CVE-2026-54835: Missing Authorization

Unauthenticated Broken Access Control in Five Star Restaurant Menu = 2.5.2 versions...

PT-2026-52734

Name of the Vulnerable Software and Affected Versions Five Star Restaurant Menu versions prior to 2.5.3 Description An unauthenticated broken access control issue exists, allowing unauthorized users to bypass access restrictions. Recommendations Update to a version newer than 2.5.2...

CVE-2026-54830

Affected software: WordPress Five Star Restaurant Reservations plugin, versions

EUVD-2026-39367

Unauthenticated Broken Access Control in Five Star Restaurant Reservations = 2.7.19 versions...

CVE-2026-54830: Missing Authorization

Unauthenticated Broken Access Control in Five Star Restaurant Reservations = 2.7.19 versions...

PT-2026-52415

Name of the Vulnerable Software and Affected Versions Five Star Restaurant Reservations versions prior to 2.7.20 Description An unauthenticated broken access control issue exists, allowing unauthorized users to bypass security restrictions and access restricted areas or functions of the...