Extension WordPress

Vulnérabilités Restaurant Menu – Food Ordering System – Table Reservation

Cette page rassemble les failles publiées pour Restaurant Menu – Food Ordering System – Table Reservation, leurs plages de versions affectées et les correctifs signalés dans la base locale.

7Vulnérabilités
0Critiques
7Avec correctif
8,8CVSS maximal

Historique de sécurité

CVE et vulnérabilités de Restaurant Menu – Food Ordering System – Table Reservation

7 fiches

CVE-2024-9653 Moyenne · 6,1
Restaurant Menu – Food Ordering System – Table Reservation

Restaurant Menu – Food Ordering System – Table Reservation <= 2.4.2 – Reflected Cross-Site Scripting

The Restaurant Menu – Food Ordering System – Table Reservation plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'action' parameter in all versions up to, and including, 2.4.2 due to insufficient input sanitization and output…

Versions affectées

*-2.4.2

Correctif

2.4.3

Publication

19/11/2024

CVE-2024-1399 Moyenne · 6,4
Restaurant Menu – Food Ordering System – Table Reservation

Restaurant Menu and Food Ordering <= 2.4.0 – Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

The Restaurant Menu – Food Ordering System – Table Reservation plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcode(s) in all versions up to, and including, 2.4.0 due to insufficient input sanitization and output…

Versions affectées

*-2.4.0

Correctif

2.4.1

Publication

14/06/2024

CVE-2024-32579 Moyenne · 6,4
Restaurant Menu – Food Ordering System – Table Reservation

Restaurant Menu – Food Ordering System – Table Reservation <= 2.4.1 – Authenticated (Contributor+) Stored Cross-Site Scripting

The Restaurant Menu – Food Ordering System – Table Reservation plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcode(s) in all versions up to, and including, 2.4.1 due to insufficient input sanitization and output…

Versions affectées

*-2.4.1

Correctif

2.4.2

Publication

16/04/2024

CVE-2023-32516 Moyenne · 6,1
Restaurant Menu – Food Ordering System – Table Reservation

Menu – Ordering – Reservations <= 2.3.6 – Reflected Cross-Site Scripting via 'redirect'

The Menu – Ordering – Reservations plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘redirect’ parameter in versions up to, and including, 2.3.6 due to insufficient input sanitization and output escaping. This makes it possible…

Versions affectées

[*, 2.3.7)

Correctif

2.3.7

Publication

09/05/2023

CVE-2022-4657 Moyenne · 6,4
Restaurant Menu – Food Ordering System – Table Reservation

Restaurant Menu – Food Ordering System – Table Reservation <= 2.3.5 – Authenticated (Contributor+) Cross-Site Scripting

The Restaurant Menu plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcodes in versions up to, and including, 2.3.5 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it…

Versions affectées

*-2.3.5

Correctif

2.3.6

Publication

04/01/2023

CVE-2022-3776 Élevée · 8,8
Restaurant Menu – Food Ordering System – Table Reservation

Restaurant Menu – Food Ordering System – Table Reservation <= 2.3.1 – Cross-Site Request Forgery

The Restaurant Menu – Food Ordering System – Table Reservation plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.3.1. This is due to missing or incorrect nonce validation on several functions…

Versions affectées

*-2.3.1

Correctif

2.3.2

Publication

31/10/2022

CVE-2022-2696 Moyenne · 6,3
Restaurant Menu – Food Ordering System – Table Reservation

Restaurant Menu – Food Ordering System – Table Reservation <= 2.3.0 – Missing Authorization on AJAX Actions

The Restaurant Menu – Food Ordering System – Table Reservation plugin for WordPress is vulnerable to authorization bypass via several AJAX actions in versions up to, and including 2.3.0 due to missing capability checks and missing nonce validation.…

Versions affectées

*-2.3.0

Correctif

2.3.1

Publication

31/10/2022

WP Commander

Rechercher dans toute la base WordPress

Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.

Ouvrir le tableau des vulnérabilités