Lucene search
WpvulndbWPVDB-ID:7F4CBBF9-9492-4A75-B9B2-4A1CAE3C2EE1HistoryJan 27, 2023 - 12:00 a.m.
Quick Restaurant Menu < 2.1.0 - Subscriber+ Arbitrary Post Deletion/Updating
2023-01-2700:00:00
wpscan.com
6
plugin
menu
deletion
authorisation
ajax
authentication
0.001 Low
EPSS
Percentile
24.2%
The plugin does not ensure that the menu to be deleted/updated is actually a menu, and does not have authorisation in the related AJAX actions, which could allow any authenticated users, such as subscriber, to delete and update arbitrary posts
| CPE | Name | Operator | Version |
|---|---|---|---|
| quick-restaurant-menu | lt | 2.1.0 |
Related
zdt
zdt
wordfence
wordfence
Multiple Vulnerabilities Patched in Quick Restaurant Menu Plugin
2023-02-01 16:07:08
cve
cve
CVE-2023-0550
2023-01-27 21:15:11
CVE-2023-0555
2023-01-27 21:15:12
cvelist
cvelist
CVE-2023-0550
2023-01-27 20:17:19
CVE-2023-0555
2023-01-27 20:31:13
nvd
nvd
CVE-2023-0550
2023-01-27 21:15:11
CVE-2023-0555
2023-01-27 21:15:12
prion
prion
Design/Logic Flaw
2023-01-27 21:15:00
Authorization
2023-01-27 21:15:00