82 matches found
CVE-2025-9209
🍔 RestroPress – 在线订餐系统 3.0.0 - 3.1.9.2 🛡️ CVE-2025-9209.py — 批量自动利用与提取工具 ⚠️ 漏洞概述 RestroPress – 在线订餐系统 版本 3.0.0 至 3.1.9.2 存在 未认证信息泄露 ，导致 通过伪造 JWT 绕过认证 。 该插件暴露了用户的私有令牌和 API 密钥数据，允许未认证攻击者伪造 JWT 令牌，从而完全访问其他用户（包括管理员）。 CVE 编号： CVE-2025-9209 CVSS 评分： 9.8（严重） 影响： 无需事先认证即可完全接管账户。 🚀 脚本功能...
RestroPress 3.0.0-3.2.1 - Authentication Bypass
RestroPress Online Food Ordering System WordPress plugin 3.0.0 to 3.1.9.2 contains an authentication bypass caused by exposure of user private tokens and API data via /wp-json/wp/v2/users endpoint, letting unauthenticated attackers forge JWT tokens and authenticate as other users including...
RestroPress-WordPress-Plugin-Sensitive-API-Key-amp-Token-Exposure-Vulnerability-Exploitation
📌 Overview CVE-2025-9209 is a critical information disclo...
Exploit for Improper Input Validation in Microsoft
CVE-2025-9209 – RestroPress Unauthenticated API Key & Token Ex...
📄 WordPress RestroPress Online Food Ordering System 3.1.9.2 Disclosure Scanner
WordPress RestroPress Online Food Ordering System plugin version 3.1.9.2 user metadata exposure scanner. ============================================================================================================================================= | Title : WordPress RestroPress Online Food Orderi...
CVE-2025-62129
Missing Authorization vulnerability in Magnigenie RestroPress restropress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects RestroPress: from n/a through = 3.2.7...
CVE-2025-62129
Missing Authorization vulnerability in Magnigenie RestroPress restropress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects RestroPress: from n/a through = 3.2.7...
CVE-2025-62129 WordPress RestroPress plugin <= 3.2.7 - Broken Access Control vulnerability
Missing Authorization vulnerability in Magnigenie RestroPress restropress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects RestroPress: from n/a through = 3.2.7...
CVE-2025-62129 WordPress RestroPress plugin <= 3.2.4.2 - Broken Access Control vulnerability
Missing Authorization vulnerability in Magnigenie RestroPress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects RestroPress: from n/a through 3.2.4.2...
CVE-2025-62129
CVE-2025-62129 is listed as a Missing Authorization vulnerability affecting RestroPress (WordPress plugin), with affected versions up to 3.2.4.2. The connected Wordfence vulnerability details describe it as an Authenticated Missing Authorization issue tied to RestroPress and indicate that this CV...
EUVD-2025-206001
Missing Authorization vulnerability in Magnigenie RestroPress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects RestroPress: from n/a through 3.2.4.2...
WordPress RestroPress plugin <= 3.2.4.2 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by daroo in WordPress Plugin RestroPress versions = 3.2.4.2...
CVE-2025-69017
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Magnigenie RestroPress restropress allows Stored XSS.This issue affects RestroPress: from n/a through = 3.2.8.6...
WordPress plugin RestroPress 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security...
PT-2025-54366
Name of the Vulnerable Software and Affected Versions RestroPress versions through 3.2.4.2 Description An authorization issue exists in Magnigenie RestroPress due to incorrectly configured access control security levels. This allows unauthorized access. Recommendations Update RestroPress to a...
EUVD-2025-205727
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Magnigenie RestroPress restropress allows Stored XSS.This issue affects RestroPress: from n/a through = 3.2.4.2...
CVE-2025-69017
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Magnigenie RestroPress restropress allows Stored XSS.This issue affects RestroPress: from n/a through = 3.2.8.6...
CVE-2025-69017 WordPress RestroPress plugin <= 3.2.8.6 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Magnigenie RestroPress restropress allows Stored XSS.This issue affects RestroPress: from n/a through = 3.2.8.6...
CVE-2025-69017 WordPress RestroPress plugin <= 3.2.8.6 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Magnigenie RestroPress restropress allows Stored XSS.This issue affects RestroPress: from n/a through = 3.2.8.6...