PT-2024-39513 · WordPress · Redi Restaurant Reservation

Name of the Vulnerable Software and Affected Versions: ReDi Restaurant Reservation plugin for WordPress versions up to, and including, 24.0902 Description: The ReDi Restaurant Reservation plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add query arg without...

WordPress ReDi Restaurant Reservation Plugin <= 24.0902 is vulnerable to Cross Site Scripting (XSS)

Software ReDi Restaurant Reservation Type Plugin Vulnerable versions = 24.0902 Fixed in 24.1015 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-9240 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID f909abb563cb Credits vg...

WordPress ReDi Restaurant Reservation plugin <= 24.0422 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin ReDi Restaurant Reservation versions = 24.0422...

WordPress ReDi Restaurant Reservation Plugin <= 24.0422 is vulnerable to Broken Access Control

Software ReDi Restaurant Reservation Type Plugin Vulnerable versions = 24.0422 Fixed in 24.0712 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2024-38737 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID 8f8c91902fd2 Credits Ananda Dhakal...

CVE-2024-31385

Cross-Site Request Forgery CSRF vulnerability in Reservation Diary ReDi Restaurant Reservation.This issue affects ReDi Restaurant Reservation: from n/a through 24.0128...

CVE-2024-31385 WordPress ReDi Restaurant Reservation plugin <= 24.0128 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Reservation Diary ReDi Restaurant Reservation.This issue affects ReDi Restaurant Reservation: from n/a through 24.0128...

CVE-2024-31385

Technical details about CVE-2024-31385 (affected version, root cause, exploitability, fix) are not provided in the connected documents. The initial description notes a CSRF issue in ReDi Restaurant Reservation; monitor for official advisories for specifics.

CVE-2024-31385 WordPress ReDi Restaurant Reservation plugin <= 24.0128 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Reservation Diary ReDi Restaurant Reservation.This issue affects ReDi Restaurant Reservation: from n/a through 24.0128...

WordPress Plugin ReDi Restaurant Reservation 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. WordPress Plugin ReDi Restaurant Reservatio...

CVE-2024-31299

Cross-Site Request Forgery CSRF vulnerability in Reservation Diary ReDi Restaurant Reservation allows Cross-Site Scripting XSS.This issue affects ReDi Restaurant Reservation: from n/a through 24.0128...

CVE-2024-31299 WordPress ReDi Restaurant Reservation plugin <= 24.0128 - Cross Site Request Forgery (CSRF) to XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in Reservation Diary ReDi Restaurant Reservation allows Cross-Site Scripting XSS.This issue affects ReDi Restaurant Reservation: from n/a through 24.0128...

CVE-2024-31299 WordPress ReDi Restaurant Reservation plugin <= 24.0128 - Cross Site Request Forgery (CSRF) to XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in Reservation Diary ReDi Restaurant Reservation allows Cross-Site Scripting XSS.This issue affects ReDi Restaurant Reservation: from n/a through 24.0128...

CVE-2024-31299

CVE-2024-31299 describes a CSRF vulnerability in the ReDi Restaurant Reservation plugin for WordPress (Reservation Diary ReDi Restaurant Reservation). The issue allows Cross-Site Scripting (XSS) and affects ReDi Restaurant Reservation versions from n/a up to 24.0128. The provided documents do not...

WordPress ReDi Restaurant Reservation plugin <= 24.0128 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by Joshua Chan Patchstack Alliance in WordPress Plugin ReDi Restaurant Reservation versions = 24.0128...

PT-2024-23946 · Unknown · Redi Restaurant Reservation

Name of the Vulnerable Software and Affected Versions: ReDi Restaurant Reservation versions through 24.0128 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Cross-Site Scripting XSS in ReDi Restaurant Reservation. This means an attacker can trick a user into...

WordPress ReDi Restaurant Reservation Plugin <= 24.0128 is vulnerable to Cross Site Request Forgery (CSRF)

Software ReDi Restaurant Reservation Type Plugin Vulnerable versions = 24.0128 Fixed in 24.0303 OWASP Top 10 A4: Insecure Design Classification Cross Site Request Forgery CSRF CVE CVE-2024-31385 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 1ed7ddbf7735 Credits Joshua Ch...

WordPress Plugin ReDi Restaurant Reservation 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. WordPress Plugin ReDi Restaurant Reservatio...

WordPress ReDi Restaurant Reservation plugin <= 24.0128 - Cross Site Request Forgery (CSRF) to XSS vulnerability

Cross Site Request Forgery CSRF to XSS vulnerability discovered by Majed Refaea Patchstack Alliance in WordPress Plugin ReDi Restaurant Reservation versions = 24.0128...

WordPress ReDi Restaurant Reservation Plugin <= 24.0128 is vulnerable to Cross Site Request Forgery (CSRF)

Software ReDi Restaurant Reservation Type Plugin Vulnerable versions = 24.0128 Fixed in 24.0303 OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-31299 Patch priority Low CVSS severity Low 7.1 Developer Claim ownership PSID b61734a1714a Credits Maj...

CVE-2024-29806

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Reservation Diary ReDi Restaurant Reservation allows Reflected XSS.This issue affects ReDi Restaurant Reservation: from n/a through 24.0128...