Lucene search
+L

43 matches found

NVD
NVD
•added 2026/10/05 7:17 p.m.•10 views

CVE-2026-103334

Insertion of Sensitive Information Into Sent Data vulnerability in Etoile Web Design Incorporated Five Star Restaurant Reservations restaurant-reservations allows Retrieve Embedded Sensitive Data.This issue affects Five Star Restaurant Reservations: from n/a through 2.7.24...

7.5CVSS0.00316EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/10/05 6:08 p.m.•8 views

EUVD-2026-92585

Insertion of Sensitive Information Into Sent Data vulnerability in Etoile Web Design Incorporated Five Star Restaurant Reservations restaurant-reservations allows Retrieve Embedded Sensitive Data.This issue affects Five Star Restaurant Reservations: from n/a through 2.7.24...

7.5CVSS5.8AI score0.00316EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/10/05 6:08 p.m.•12 views

CVE-2026-103334 WordPress Five Star Restaurant Reservations plugin <= 2.7.24 - Sensitive Data Exposure vulnerability

Insertion of Sensitive Information Into Sent Data vulnerability in Etoile Web Design Incorporated Five Star Restaurant Reservations restaurant-reservations allows Retrieve Embedded Sensitive Data.This issue affects Five Star Restaurant Reservations: from n/a through 2.7.24...

7.5CVSS5.8AI score0.00316EPSS
SaveExploits0References1
CVE
CVE
•added 2026/10/05 6:08 p.m.•17 views

CVE-2026-103334

The Five Star Restaurant Reservations WordPress plugin (versions

7.5CVSS5.8AI score0.00316EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/10/05 6:08 p.m.•29 views

CVE-2026-103334 WordPress Five Star Restaurant Reservations plugin <= 2.7.24 - Sensitive Data Exposure vulnerability

Insertion of Sensitive Information Into Sent Data vulnerability in Etoile Web Design Incorporated Five Star Restaurant Reservations restaurant-reservations allows Retrieve Embedded Sensitive Data.This issue affects Five Star Restaurant Reservations: from n/a through 2.7.24...

7.5CVSS0.00316EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/10/05 12:00 a.m.•7 views

PT-2026-106073

Insertion of Sensitive Information Into Sent Data vulnerability in Etoile Web Design Incorporated Five Star Restaurant Reservations restaurant-reservations allows Retrieve Embedded Sensitive Data.This issue affects Five Star Restaurant Reservations: from n/a through 2.7.24...

7.5CVSS5.8AI score0.00316EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/05 12:00 a.m.•9 views

CVE-2026-103334: Insertion of Sensitive Information Into Sent Data

Insertion of Sensitive Information Into Sent Data vulnerability in Etoile Web Design Incorporated Five Star Restaurant Reservations restaurant-reservations allows Retrieve Embedded Sensitive Data.This issue affects Five Star Restaurant Reservations: from n/a through 2.7.24...

7.5CVSS5.8AI score0.00316EPSS
SaveExploits0References2
Patchstack
Patchstack
•added 2026/10/03 5:40 p.m.•14 views

WordPress Five Star Restaurant Reservations plugin <= 2.7.24 - Sensitive Data Exposure vulnerability

Sensitive Data Exposure vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Five Star Restaurant Reservations versions = 2.7.24...

7.5CVSS5.8AI score0.00316EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
•added 2026/09/17 3:23 p.m.•12 views

WordPress Five Star Restaurant Reservations plugin < 2.7.23 - Unauthenticated Payment Bypass and Booking Confirmation via IDOR vulnerability

Unauthenticated Payment Bypass and Booking Confirmation via IDOR vulnerability discovered by Muni Nitish Kumar Yaddala in WordPress Plugin Five Star Restaurant Reservations versions 2.7.23...

5.3CVSS5.8AI score0.00163EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/06 12:00 a.m.•8 views

CVE-2026-15147: Insufficient Verification of Data Authenticity

The Five Star Restaurant Reservations WordPress plugin before 2.7.23 does not verify the authenticity of incoming payment notifications, failing to validate the payment recipient, amount, and status or to bind the notification to the intended booking, allowing unauthenticated attackers to mark...

5.3CVSS6AI score0.00163EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/08/06 12:00 a.m.•11 views

PT-2026-68650

The Five Star Restaurant Reservations WordPress plugin before 2.7.23 does not verify the authenticity of incoming payment notifications, failing to validate the payment recipient, amount, and status or to bind the notification to the intended booking, allowing unauthenticated attackers to mark...

5.3CVSS6.1AI score0.00163EPSS
SaveExploits0References2
Patchstack
Patchstack
•added 2026/08/02 6:00 a.m.•17 views

WordPress Five Star Restaurant Reservations plugin < 2.7.23 - Booking Manager+ Missing Authorization vulnerability

Booking Manager+ Missing Authorization vulnerability discovered by Minar in WordPress Plugin Five Star Restaurant Reservations versions 2.7.23...

7.5CVSS5.5AI score0.00394EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/02 12:00 a.m.•7 views

CVE-2026-15151: Improper Access Control

The Five Star Restaurant Reservations WordPress plugin before 2.7.23 does not perform a capability check on one of its AJAX actions, allowing users with the lowest booking-management role which by default cannot access the Five Star Restaurant Reservations WordPress plugin before 2.7.23's setting...

7.5CVSS5.8AI score0.00394EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/06/25 12:00 a.m.•6 views

CVE-2026-54830: Missing Authorization

Unauthenticated Broken Access Control in Five Star Restaurant Reservations = 2.7.19 versions...

7.5CVSS5.7AI score0.00346EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/06/02 12:00 a.m.•3 views

CVE-2026-42670: Missing Authorization

Missing Authorization vulnerability in Etoile Web Design Incorporated Five Star Restaurant Reservations allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Five Star Restaurant Reservations: from n/a through 2.7.14...

7.5CVSS5.9AI score0.00428EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2026/04/30 12:00 a.m.•24 views

WordPress plugin Five Star Restaurant Reservations 数据伪造问题漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

5.3CVSS5.7AI score0.00242EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/30 12:00 a.m.•6 views

CVE-2026-6498: Insufficient Verification of Data Authenticity

The Five Star Restaurant Reservations plugin for WordPress is vulnerable to a payment bypass via PHP type juggling in versions up to, and including, 2.7.16 This is due to the validpayment function using a PHP loose comparison == between the attacker-controlled paymentid POST parameter and the...

5.3CVSS5.6AI score0.00242EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/03/25 12:00 a.m.•5 views

CVE-2026-25327: Missing Authorization

Missing Authorization vulnerability in Rustaurius Five Star Restaurant Reservations restaurant-reservations allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Five Star Restaurant Reservations: from n/a through = 2.7.9...

6.5CVSS5.9AI score0.00209EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/02/02 12:00 a.m.•20 views

PT-2026-5611

The Five Star Restaurant Reservations WordPress plugin before 2.7.9 does not have CSRF checks in some bulk actions, which could allow attackers to make logged in admins perform unwanted actions, such as deleting bookings via CSRF attacks...

5.4AI score0.00153EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/02/02 12:00 a.m.•7 views

CVE-2026-0658: Cross-Site Request Forgery (CSRF)

The Five Star Restaurant Reservations WordPress plugin before 2.7.9 does not have CSRF checks in some bulk actions, which could allow attackers to make logged in admins perform unwanted actions, such as deleting bookings via CSRF attacks...

4.3CVSS5.8AI score0.00153EPSS
SaveExploits0References1
Rows per page
Query Builder