Lucene search
+L

1715 matches found

NVD
NVD
added 2026/01/07 12:16 p.m.5 views

CVE-2025-14112

The Snillrik Restaurant plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'menustyle' shortcode attribute in all versions up to, and including, 2.3.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

6.4CVSS0.00297EPSS
Exploits0References4
CVE
CVE
added 2026/01/07 9:20 a.m.24 views

CVE-2025-14112

CVE-2025-14112 : Snillrik Restaurant Menu (WordPress) is affected by a Stored Cross-Site Scripting vulnerability in the menu_style shortcode attribute. The issue exists in all versions up to 2.2.1 and requires an authenticated attacker with Contributor-level access or higher to inject arbitrary s...

6.4CVSS6.1AI score0.00297EPSS
Exploits0References4
RedhatCVE
RedhatCVE
added 2026/01/07 9:18 a.m.12 views

CVE-2025-1906

A vulnerability has been found in PHPGurukul Restaurant Table Booking System 1.0 and classified as critical. This vulnerability affects unknown code of the file /admin/profile.php. The manipulation of the argument mobilenumber leads to sql injection. The attack can be initiated remotely. The...

9.8CVSS7.8AI score0.00383EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2026/01/07 9:17 a.m.19 views

CVE-2025-1952

A vulnerability, which was classified as critical, was found in PHPGurukul Restaurant Table Booking System 1.0. Affected is an unknown function of the file /admin/password-recovery.php. The manipulation of the argument username/mobileno leads to sql injection. It is possible to launch the attack...

9.8CVSS7.6AI score0.00487EPSS
Exploits1References1
CNNVD
CNNVD
added 2026/01/07 12:0 a.m.6 views

WordPress plugin Snillrik Restaurant 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to set up personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site scripti...

6.4CVSS5.8AI score0.00297EPSS
Exploits0References3
Patchstack
Patchstack
added 2026/01/06 11:25 p.m.7 views

WordPress Snillrik Restaurant plugin <= 2.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'menu_style' Shortcode Attribute vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via 'menustyle' Shortcode Attribute vulnerability discovered by zakaria in WordPress Plugin Snillrik Restaurant versions = 2.2.1...

6.4CVSS5.5AI score0.00297EPSS
Exploits0References1Affected Software1
RedhatCVE
RedhatCVE
added 2026/01/06 11:14 a.m.8 views

CVE-2025-68044

Authorization Bypass Through User-Controlled Key vulnerability in Rustaurius Five Star Restaurant Reservations restaurant-reservations allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Five Star Restaurant Reservations: from n/a through = 2.7.4...

8.6CVSS5.9AI score0.00229EPSS
Exploits0References1
Patchstack
Patchstack
added 2026/01/05 11:34 a.m.10 views

WordPress Grand Restaurant theme < 7.0.9 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Theme Grand Restaurant versions 7.0.9...

6.1CVSS6.1AI score0.0018EPSS
Exploits0Affected Software1
CNNVD
CNNVD
added 2026/01/05 12:0 a.m.6 views

WordPress plugin Five Star Restaurant Reservations 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to set up personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security...

8.6CVSS6.5AI score0.00229EPSS
Exploits0References2
Patchstack
Patchstack
added 2026/01/02 8:13 a.m.12 views

WordPress Five Star Restaurant Reservations plugin <= 2.7.4 - Insecure Direct Object References (IDOR) vulnerability

Insecure Direct Object References IDOR vulnerability discovered by daroo in WordPress Plugin Five Star Restaurant Reservations versions = 2.7.4...

8.6CVSS5.4AI score0.00229EPSS
Exploits0Affected Software1
RedhatCVE
RedhatCVE
added 2025/12/25 1:23 p.m.8 views

CVE-2025-68601

Cross-Site Request Forgery CSRF vulnerability in Rustaurius Five Star Restaurant Reservations restaurant-reservations allows Cross Site Request Forgery.This issue affects Five Star Restaurant Reservations: from n/a through = 2.7.8...

5.4CVSS5.9AI score0.00097EPSS
Exploits0References1
CNVD
CNVD
added 2025/12/25 12:0 a.m.4 views

WordPress Plugin Restaurant Menu by MotoPress Information Disclosure Vulnerability

WordPress is a blogging platform developed using the PHP language. The platform has the ability to set up a personal blog site on a PHP and MySQL based server.WordPress plugin is an application plugin. An information disclosure vulnerability exists in the WordPress plugin Restaurant Menu by...

6.5CVSS5.9AI score0.00293EPSS
Exploits0References1
Patchstack
Patchstack
added 2025/12/24 5:5 p.m.8 views

WordPress Five Star Restaurant Reservations plugin <= 2.7.8 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by benzdeus in WordPress Plugin Five Star Restaurant Reservations versions = 2.7.8...

8.8CVSS6.7AI score0.00097EPSS
Exploits0Affected Software1
EUVD
EUVD
added 2025/12/24 3:30 p.m.6 views

EUVD-2025-205234

Cross-Site Request Forgery CSRF vulnerability in Rustaurius Five Star Restaurant Reservations restaurant-reservations allows Cross Site Request Forgery.This issue affects Five Star Restaurant Reservations: from n/a through = 2.7.7...

8.8CVSS6.3AI score0.00097EPSS
Exploits0References2
NVD
NVD
added 2025/12/24 1:16 p.m.5 views

CVE-2025-68601

Cross-Site Request Forgery CSRF vulnerability in Rustaurius Five Star Restaurant Reservations restaurant-reservations allows Cross Site Request Forgery.This issue affects Five Star Restaurant Reservations: from n/a through = 2.7.8...

5.4CVSS0.00097EPSS
Exploits0References1
CVE
CVE
added 2025/12/24 1:10 p.m.14 views

CVE-2025-68601

Technical details for CVE-2025-68601 are not provided in the Connected documents. The Initial Description mentions a CSRF issue affecting Five Star Restaurant Reservations (≤2.7.8) but no specifics on affected files, root cause, impact, or remediation are available here.

5.4CVSS5.9AI score0.00097EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/12/24 1:10 p.m.30 views

CVE-2025-68601 WordPress Five Star Restaurant Reservations plugin <= 2.7.8 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Rustaurius Five Star Restaurant Reservations restaurant-reservations allows Cross Site Request Forgery.This issue affects Five Star Restaurant Reservations: from n/a through = 2.7.8...

5.4CVSS0.00097EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/12/24 1:10 p.m.4 views

CVE-2025-68601 WordPress Five Star Restaurant Reservations plugin <= 2.7.8 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Rustaurius Five Star Restaurant Reservations restaurant-reservations allows Cross Site Request Forgery.This issue affects Five Star Restaurant Reservations: from n/a through = 2.7.8...

5.4CVSS5.1AI score0.00097EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/12/24 12:0 a.m.6 views

WordPress plugin Five Star Restaurant Reservations 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to set up personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security...

5.4CVSS6.5AI score0.00097EPSS
Exploits0References1
NVD
NVD
added 2025/12/21 3:15 a.m.7 views

CVE-2025-11496

The Five Star Restaurant Reservations – WordPress Booking Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'rtb-name' parameter in all versions up to, and including, 2.7.5 due to insufficient input sanitization and output escaping. This makes it possible for...

6.1CVSS0.00175EPSS
Exploits0References2
Rows per page
Query Builder