Lucene search
+L

90 matches found

Kitploit
Kitploit
•added 2026/10/11 12:16 a.m.•31 views

CVEs

CVE List CVE-2024-22890: My e-Diary App - Cross-Site-Scripting Proof of ConceptPoC : https://github.com/BurakSevben/CVEs/blob/main/CVE-2024-22890.md CVE-2024-22909 : Online-Exam-System - Cross-Site-Scripting Proof of ConceptPoC : https://github.com/BurakSevben/CVEs/blob/main/CVE-2024-22909.md...

9.8CVSS6.2AI score0.01159EPSS
SaveExploits16References16
NVD
NVD
•added 2026/10/10 8:16 p.m.•10 views

CVE-2026-42709

Unauthenticated Cross Site Scripting XSS in Food Menu – Restaurant Menu & Online Ordering for WooCommerce = 6.0.5 versions...

7.1CVSS0.0018EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/10/10 7:35 p.m.•9 views

EUVD-2026-96444

Unauthenticated Cross Site Scripting XSS in Food Menu – Restaurant Menu & Online Ordering for WooCommerce = 6.0.5 versions...

7.1CVSS5.7AI score0.0018EPSS
SaveExploits0References1
CVE
CVE
•added 2026/10/10 7:35 p.m.•14 views

CVE-2026-42709

The Food Menu – Restaurant Menu & Online Ordering for WooCommerce WordPress plugin, in versions

7.1CVSS5.7AI score0.0018EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/10/10 7:35 p.m.•43 views

CVE-2026-42709 WordPress Food Menu – Restaurant Menu & Online Ordering for WooCommerce plugin <= 6.0.5 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in Food Menu – Restaurant Menu & Online Ordering for WooCommerce = 6.0.5 versions...

7.1CVSS0.0018EPSS
SaveExploits0References1
Kitploit
Kitploit
•added 2026/10/10 4:14 p.m.•14 views

CVE-2024-24134

CVE-2024-24134 : Online Food Menu - Cross-Site-Scripting Proof of ConceptPoc : https://github.com/BurakSevben/CVEs/blob/main/CVE-2024-24134.md Proof of ConceptPoc : https://github.com/BurakSevben/CVE-2024-24134/blob/main/CVE-2024-24134.md...

4.8CVSS5.5AI score0.00718EPSS
SaveExploits3References2
Positive Technologies
Positive Technologies
•added 2026/10/10 12:00 a.m.•10 views

PT-2026-109775

Name of the Vulnerable Software and Affected Versions Food Menu – Restaurant Menu & Online Ordering for WooCommerce versions prior to 6.0.6 Description An unauthenticated Cross Site Scripting XSS issue exists, which allows an attacker to execute malicious scripts in the browser of a user without...

7.1CVSS6AI score0.0018EPSS
SaveExploits0References5
Patchstack
Patchstack
•added 2026/10/07 12:34 p.m.•6 views

WordPress Food Menu – Restaurant Menu & Online Ordering for WooCommerce plugin <= 6.0.5 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by John Ryan Albon in WordPress Plugin Food Menu – Restaurant Menu & Online Ordering for WooCommerce versions = 6.0.5...

7.1CVSS5.8AI score0.0018EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
•added 2026/08/14 8:27 a.m.•19 views

WordPress TLP Food Menu plugin < 6.0.2 - Unauthenticated Reservation Status Modification vulnerability

Unauthenticated Reservation Status Modification vulnerability discovered by Vaibhav Narkhede in WordPress Plugin Food Menu – Restaurant Menu & Online Ordering for WooCommerce versions 6.0.2...

5.3CVSS5.2AI score0.00304EPSS
SaveExploits0References1Affected Software1
NVD
NVD
•added 2026/08/13 6:17 a.m.•21 views

CVE-2026-13328

The Food Menu WordPress plugin before 6.0.2 does not perform any capability or ownership check on its reservation-status update action, which is also exposed to unauthenticated users and gated only by a nonce that is publicly available to visitors, allowing unauthenticated attackers to change the...

5.3CVSS0.00304EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/08/13 6:00 a.m.•22 views

EUVD-2026-57724

The Food Menu WordPress plugin before 6.0.2 does not perform any capability or ownership check on its reservation-status update action, which is also exposed to unauthenticated users and gated only by a nonce that is publicly available to visitors, allowing unauthenticated attackers to change the...

5.5AI score0.00304EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/08/13 6:00 a.m.•20 views

CVE-2026-13328

The Food Menu WordPress plugin before 6.0.2 does not perform any capability or ownership check on its reservation-status update action, which is also exposed to unauthenticated users and gated only by a nonce that is publicly available to visitors, allowing unauthenticated attackers to change the...

5.5AI score0.00304EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/08/13 6:00 a.m.•53 views

CVE-2026-13328 TLP Food Menu < 6.0.2 - Unauthenticated Reservation Status Modification

The Food Menu WordPress plugin before 6.0.2 does not perform any capability or ownership check on its reservation-status update action, which is also exposed to unauthenticated users and gated only by a nonce that is publicly available to visitors, allowing unauthenticated attackers to change the...

0.00304EPSS
SaveExploits0References1
CVE
CVE
•added 2026/08/13 6:00 a.m.•70 views

CVE-2026-13328

The Food Menu WordPress plugin (versions before 6.0.2 ) is vulnerable to an unauthenticated reservation status modification flaw. The plugin fails to perform necessary capability or ownership checks on its reservation-status update action. Because this action is exposed to unauthenticated users a...

6AI score0.00304EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/13 12:00 a.m.•6 views

CVE-2026-13328: Improper Access Control

The Food Menu WordPress plugin before 6.0.2 does not perform any capability or ownership check on its reservation-status update action, which is also exposed to unauthenticated users and gated only by a nonce that is publicly available to visitors, allowing unauthenticated attackers to change the...

5.3CVSS6AI score0.00304EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/08/13 12:00 a.m.•15 views

PT-2026-71389

Name of the Vulnerable Software and Affected Versions Food Menu versions prior to 6.0.2 Description An issue exists where the plugin fails to perform capability or ownership checks on the reservation-status update action. This action is exposed to unauthenticated users and is protected only by a...

5.3CVSS5.9AI score0.00304EPSS
SaveExploits0References6
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•22 views

EUVD-2024-51587

Malicious code in bioql PyPI...

4.3CVSS9.1AI score0.00299EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•21 views

EUVD-2025-19323

Malicious code in bioql PyPI...

8.6CVSS6.6AI score0.00523EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•14 views

EUVD-2025-18509

Malicious code in bioql PyPI...

10CVSS8.7AI score0.00397EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•22 views

EUVD-2024-49263

Malicious code in bioql PyPI...

7.2CVSS5AI score0.00412EPSS
SaveExploits0References4
Rows per page
Query Builder