CVE-2026-15151

Affected product : Five Star Restaurant Reservations WordPress plugin (before 2.7.23). Issue : Missing capability check on an AJAX action enables users with the lowest booking-management role to reset the site’s configured booking notification rules. Impact : As described, this permits privilege ...