Lucene search
+L

431 matches found

Cvelist
Cvelist
added 2025/12/24 1:10 p.m.31 views

CVE-2025-68601 WordPress Five Star Restaurant Reservations plugin <= 2.7.8 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Rustaurius Five Star Restaurant Reservations restaurant-reservations allows Cross Site Request Forgery.This issue affects Five Star Restaurant Reservations: from n/a through = 2.7.8...

5.4CVSS0.00099EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/12/24 1:7 p.m.37 views

CVE-2023-54158 btrfs: don't free qgroup space unless specified

In the Linux kernel, the following vulnerability has been resolved: btrfs: don't free qgroup space unless specified Boris noticed in his simple quotas testing that he was getting a leak with Sweet Tea's change to subvol create that stopped doing a transaction commit. This was just a side effect o...

0.00214EPSS
SaveExploits0References7
CNNVD
CNNVD
added 2025/12/24 12:0 a.m.6 views

WordPress plugin Five Star Restaurant Reservations 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to set up personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security...

5.4CVSS6.5AI score0.00099EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/12/24 12:0 a.m.8 views

PT-2025-53289

Name of the Vulnerable Software and Affected Versions Rustaurius Five Star Restaurant Reservations versions through 2.7.7 Description A Cross-Site Request Forgery CSRF issue exists in Rustaurius Five Star Restaurant Reservations restaurant-reservations, potentially allowing attackers to perform...

8.8CVSS6.5AI score0.00099EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
added 2025/12/22 2:35 a.m.8 views

CVE-2025-11496

The Five Star Restaurant Reservations – WordPress Booking Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'rtb-name' parameter in all versions up to, and including, 2.7.5 due to insufficient input sanitization and output escaping. This makes it possible for...

6.1CVSS5.2AI score0.00175EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/12/21 3:31 a.m.9 views

EUVD-2025-204654

The Five Star Restaurant Reservations – WordPress Booking Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'rtb-name' parameter in all versions up to, and including, 2.7.5 due to insufficient input sanitization and output escaping. This makes it possible for...

6.1CVSS4.8AI score0.00175EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2025/12/21 2:20 a.m.31 views

CVE-2025-11496 Five Star Restaurant Reservations – WordPress Booking Plugin <= 2.7.5 - Unauthenticated Stored Cross-Site Scripting

The Five Star Restaurant Reservations – WordPress Booking Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'rtb-name' parameter in all versions up to, and including, 2.7.5 due to insufficient input sanitization and output escaping. This makes it possible for...

6.1CVSS0.00175EPSS
SaveExploits0References2
CVE
CVE
added 2025/12/21 2:20 a.m.26 views

CVE-2025-11496

The CVE-2025-11496 entry concerns Five Star Restaurant Reservations – WordPress Booking Plugin (WordPress plugin) with Stored Cross-Site Scripting via the rtb-name parameter in all versions up to 2.7.5, due to insufficient input sanitization and output escaping. This allows unauthenticated attack...

6.1CVSS4.9AI score0.00175EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2025/12/21 2:20 a.m.4 views

CVE-2025-11496 Five Star Restaurant Reservations – WordPress Booking Plugin <= 2.7.5 - Unauthenticated Stored Cross-Site Scripting

The Five Star Restaurant Reservations – WordPress Booking Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'rtb-name' parameter in all versions up to, and including, 2.7.5 due to insufficient input sanitization and output escaping. This makes it possible for...

6.1CVSS4.9AI score0.00175EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/12/21 12:0 a.m.8 views

WordPress plugin Five Star Restaurant Reservations – WordPress Booking Plugin 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin.... A cross-site...

6.1CVSS5.9AI score0.00175EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2025/12/21 12:0 a.m.13 views

PT-2025-52570

Name of the Vulnerable Software and Affected Versions Five Star Restaurant Reservations – WordPress Booking Plugin versions prior to 2.7.6 Description The Five Star Restaurant Reservations – WordPress Booking Plugin for WordPress is susceptible to Stored Cross-Site Scripting. This is due to...

6.1CVSS6.1AI score0.00175EPSS
SaveExploits0References6
Tenable Nessus
Tenable Nessus
added 2025/11/18 12:0 a.m.5 views

Siemens SCALANCE and RUGGEDCOM Devices Allocation of Resources Without Limits or Throttling (CVE-2024-41009)

bpf: Fix overrunning reservations in ringbuf. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid504616; scriptversion"1.3";...

5.5CVSS6.6AI score0.00259EPSS
SaveExploits0References4
Patchstack
Patchstack
added 2025/11/10 2:2 a.m.10 views

WordPress Alex Reservations: Smart Restaurant Booking plugin <= 2.2.3 - Authenticated (Admin+) Arbitrary File Upload vulnerability

Authenticated Admin+ Arbitrary File Upload vulnerability discovered by Ryan Kozak in WordPress Plugin Alex Reservations versions = 2.2.3...

7.2CVSS6.7AI score0.00629EPSS
SaveExploits1References1Affected Software1
RedhatCVE
RedhatCVE
added 2025/11/09 9:56 a.m.20 views

CVE-2025-12399

The Alex Reservations: Smart Restaurant Booking plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the /wp-json/srr/v1/app/upload/file REST endpoint in all versions up to, and including, 2.2.3. This makes it possible for authenticated attackers, wi...

7.2CVSS7.3AI score0.00629EPSS
SaveExploits1References1
EUVD
EUVD
added 2025/11/08 12:30 p.m.11 views

EUVD-2025-38369

The Alex Reservations: Smart Restaurant Booking plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the /wp-json/srr/v1/app/upload/file REST endpoint in all versions up to, and including, 2.2.3. This makes it possible for authenticated attackers, wi...

7.2CVSS6.8AI score0.00629EPSS
SaveExploits1References6
Vulnrichment
Vulnrichment
added 2025/11/08 9:28 a.m.6 views

CVE-2025-12399 Alex Reservations: Smart Restaurant Booking <= 2.2.3 - Authenticated (Admin+) Arbitrary File Upload

The Alex Reservations: Smart Restaurant Booking plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the /wp-json/srr/v1/app/upload/file REST endpoint in all versions up to, and including, 2.2.3. This makes it possible for authenticated attackers, wi...

7.2CVSS6.7AI score0.00629EPSS
SaveExploits1References5
CVE
CVE
added 2025/11/08 9:28 a.m.33 views

CVE-2025-12399

Summary: CVE-2025-12399 affects the WordPress plugin “Alex Reservations: Smart Restaurant Booking” up to version 2.2.3. The vulnerability stems from missing file type validation in the REST endpoint /wp-json/srr/v1/app/upload/file, enabling authenticated attackers with Administrator-level access ...

7.2CVSS7AI score0.00629EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2025/11/08 12:0 a.m.11 views

WordPress plugin Alex Reservations: Smart Restaurant Booking 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A code issue...

7.2CVSS7.6AI score0.00629EPSS
SaveExploits1References6
Microsoft CVE
Microsoft CVE
added 2025/10/31 8:9 a.m.5 views

drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies

...

7.8CVSS7AI score0.00144EPSS
SaveExploits0
Debian CVE
Debian CVE
added 2025/10/30 9:48 a.m.14 views

CVE-2025-40096

In the Linux kernel, the following vulnerability has been resolved: drm/sched: Fix potential double free in drmschedjobaddresvdependencies When adding dependencies with drmschedjobadddependency, that function consumes the fence reference both on success and failure, so in the latter case the...

7.8CVSS5.4AI score0.00144EPSS
SaveExploits0
Rows per page
Query Builder