Rustaurius vulnerabilities

Products

• Five Star Restaurant Reservations 13
• Front End Users 13
• Ultimate Wp Mail 6
• Ultimate Reviews 4
• Five Star Restaurant Reservations – Wordpress Booking Plugin 3
• Five Star Restaurant Menu And Food Ordering 2
• Order Tracking 2
• Order Tracking – Wordpress Status Tracking Plugin 2
• Ultimate Faq 2

Newest

• rustaurius front end users Front End Users <= 3.2.35 - Unauthenticated Membership Level and Account Status Self-Assignment CVE-2026-87835 6.5 MediumOctober 24, 2026
• etoile web design incorporated five star restaurant reservations WordPress Five Star Restaurant Reservations plugin <= 2.7.24 - Sensitive Data Exposure vulnerability CVE-2026-103334 7.5 HighOctober 5, 2026
• rustaurius ultimate faq WordPress Ultimate FAQ plugin <= 2.4.14 - Cross Site Scripting (XSS) vulnerability CVE-2026-94391 6.5 MediumSeptember 23, 2026
• rustaurius five star restaurant reservations Five Star Restaurant Reservations < 2.7.23 - Unauthenticated Payment Bypass and Booking Confirmation via IDOR CVE-2026-15147 5.3 MediumAugust 6, 2026
• rustaurius five star restaurant reservations Five Star Restaurant Reservations < 2.7.23 - Booking Manager+ Missing Authorization via rtb_reset_notifications CVE-2026-15151 7.5 HighAugust 2, 2026
• rustaurius five star business profile and schema WordPress Five Star Business Profile and Schema plugin <= 2.3.19 - Arbitrary Code Execution vulnerability CVE-2026-27436 9.1 CriticalJuly 2, 2026
• five star plugins star restaurant menu, rustaurius five star restaurant menu +1 more WordPress Five Star Restaurant Menu plugin <= 2.5.2 - Broken Access Control vulnerability CVE-2026-54835 7.5 HighJune 26, 2026
• etoile web design incorporated five star restaurant reservations WordPress Five Star Restaurant Reservations plugin <= 2.7.19 - Broken Access Control vulnerability CVE-2026-54830 7.5 HighJune 25, 2026
• etoile web design incorporated five star restaurant reservations WordPress Five Star Restaurant Reservations plugin <= 2.7.14 - Payment Bypass vulnerability CVE-2026-42670 7.5 HighJune 2, 2026
• rustaurius five star restaurant reservations – wordpress booking plugin Five Star Restaurant Reservations <= 2.7.16 - Unauthenticated Payment Bypass via PHP Type Juggling in 'payment_id' Parameter CVE-2026-6498 5.3 MediumApril 30, 2026
• rustaurius ultimate faq accordion plugin Ultimate FAQ Accordion Plugin <= 2.4.7 - Authenticated (Author+) Stored Cross-Site Scripting via FAQ Content CVE-2026-4336 6.4 MediumApril 9, 2026
• rustaurius order tracking WordPress Order Tracking plugin <= 3.4.3 - Broken Access Control vulnerability CVE-2026-39602 5.3 MediumApril 8, 2026
• rustaurius five star restaurant reservations WordPress Five Star Restaurant Reservations plugin <= 2.7.9 - Broken Access Control vulnerability CVE-2026-25327 6.5 MediumMarch 25, 2026
• rustaurius five star restaurant reservations Five Star Restaurant Reservations < 2.7.9 - Arbitrary Bookings Deletion via CSRF CVE-2026-0658 4.3 MediumFebruary 2, 2026
• rustaurius ultimate reviews WordPress Ultimate Reviews plugin <= 3.2.16 - Insecure Direct Object References (IDOR) vulnerability CVE-2026-24634 5.3 MediumJanuary 23, 2026
• rustaurius five star restaurant reservations WordPress Five Star Restaurant Reservations plugin <= 2.7.4 - Insecure Direct Object References (IDOR) vulnerability CVE-2025-68044 8.6 HighJanuary 5, 2026
• rustaurius five star restaurant reservations WordPress Five Star Restaurant Reservations plugin <= 2.7.8 - Cross Site Request Forgery (CSRF) vulnerability CVE-2025-68601 5.4 MediumDecember 24, 2025
• rustaurius five star restaurant reservations – wordpress booking plugin Five Star Restaurant Reservations – WordPress Booking Plugin <= 2.7.5 - Unauthenticated Stored Cross-Site Scripting CVE-2025-11496 6.1 MediumDecember 21, 2025
• rustaurius ultimate faq WordPress Ultimate FAQ plugin <= 2.4.3 - Cross Site Request Forgery (CSRF) vulnerability CVE-2025-67590 4.3 MediumDecember 9, 2025
• rustaurius affiliate ai lite Affiliate AI Lite <= 1.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2025-11799 6.4 MediumNovember 21, 2025
• rustaurius front end users WordPress Front End Users plugin <= 3.2.33 - Broken Access Control vulnerability CVE-2025-62072 4.3 MediumOctober 22, 2025
• rustaurius ultimate wp mail WordPress Ultimate WP Mail Plugin <= 1.3.8 - Cross Site Scripting (XSS) Vulnerability CVE-2025-53454 6.5 MediumSeptember 22, 2025
• rustaurius front end users WordPress Front End Users plugin <= 3.2.35 - Cross Site Scripting (XSS) vulnerability CVE-2025-58235 6.5 MediumSeptember 22, 2025
• rustaurius ultimate wp mail Ultimate WP Mail 1.0.17 - 1.3.6 - Missing Authorization to Authenticated (Contributor+) Privilege Escalation via get_email_log_details Function CVE-2025-6993 7.5 HighJuly 16, 2025
• rustaurius ultimate reviews WordPress Ultimate Reviews plugin <= 3.2.14 - Reflected Cross Site Scripting (XSS) vulnerability CVE-2025-49266 7.1 HighJune 17, 2025
• rustaurius ultimate wp mail WordPress Ultimate WP Mail plugin <= 1.3.5 - Account Takeover via Email Log Leak Vulnerability CVE-2025-49288 8.8 HighJune 6, 2025
• etoilewebdesign front end users WordPress Front End Users plugin <= 3.2.35 - Broken Access Control vulnerability CVE-2025-47580 5.4 MediumMay 15, 2025
• rustaurius ultimate wp mail WordPress Ultimate WP Mail plugin <= 1.3.4 - SQL Injection Vulnerability CVE-2025-47490 8.5 HighMay 7, 2025
• rustaurius ultimate wp mail WordPress Ultimate WP Mail plugin <= 1.3.4 - Cross Site Request Forgery (CSRF) Vulnerability CVE-2025-47466 5.4 MediumMay 7, 2025
• etoilewebdesign front end users Front End Users <= 3.2.32 - Reflected XSS CVE-2024-13569 7.1 HighApril 22, 2025
• rustaurius ultimate wp mail WordPress Ultimate WP Mail plugin <= 1.3.10 - Open Redirection vulnerability CVE-2025-32694 4.7 MediumApril 9, 2025
• etoilewebdesign front end users Front End Users <= 3.2.32 - Authenticated (Admin+) SQL injection CVE-2024-12410 4.9 MediumApril 2, 2025
• etoilewebdesign front end users Front-End-Only-Users <= 3.2.32 - Unauthenticated Arbitrary File Upload CVE-2025-2005 Public exploit EPSS 21.8% 9.8 CriticalApril 2, 2025
• rustaurius five star restaurant reservations WordPress Five Star Restaurant Reservations plugin <= 2.6.29 - Broken Access Control vulnerability CVE-2025-30861 4.9 MediumMarch 27, 2025
• etoilewebdesign front end users WordPress Front End Users Plugin <= 3.2.30 - Cross Site Scripting (XSS) vulnerability CVE-2025-26877 6.5 MediumFebruary 25, 2025
• etoilewebdesign front end users Front End Users <= 3.2.30 - Authenticated (Contributor+) Stored Cross-Site Scripting via forgot-password Shortcode CVE-2024-13563 6.4 MediumFebruary 15, 2025
• etoile web design order tracking WordPress Order Tracking – WordPress Status Tracking Plugin plugin < 3.3.13 - Broken Access Control vulnerability CVE-2024-43343 4.3 MediumNovember 1, 2024
• etoilewebdesign front end users Front End Users <= 3.2.28 - Authenticated (Contributor+) Time-Based SQL Injection CVE-2024-7607 8.8 HighAugust 29, 2024
• etoilewebdesign front end users Front End Users <= 3.2.28 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode CVE-2024-7606 6.4 MediumAugust 29, 2024
• fivestarplugins five star restaurant menu, rustaurius five star restaurant menu and food ordering +1 more Restaurant Menu and Food Ordering <= 2.4.16 - Missing Authorization to Menu Creation CVE-2024-5459 4.3 MediumJune 5, 2024
• five star plugins star restaurant reservations, fivestarplugins five star restaurant reservations +1 more WordPress Five Star Restaurant Reservations plugin <= 2.6.16 - Broken Access Control vulnerability CVE-2024-33596 5.3 MediumApril 29, 2024
• etoile web design front end users WordPress Front End Users plugin < 3.2.25 - Cross Site Scripting (XSS) vulnerability CVE-2023-33322 7.1 HighMarch 26, 2024
• etoile web design ultimate reviews WordPress Ultimate Reviews plugin <= 3.2.8 - Unauthenticated Cross Site Scripting (XSS) vulnerability CVE-2024-25597 7.1 HighMarch 15, 2024
• fivestarplugins five star restaurant menu, rustaurius five star restaurant menu and food ordering +1 more Five Star Restaurant Menu and Food Ordering < 2.4.11 - Unauthenticated PHP Object Injection CVE-2023-5340 9.8 CriticalNovember 20, 2023
• etoilewebdesign order tracking, rustaurius order tracking – wordpress status tracking plugin +1 more Order Tracking Pro <= 3.3.6 - Reflected Cross-Site Scripting CVE-2023-4471 6.1 MediumAugust 31, 2023
• etoilewebdesign order tracking, rustaurius order tracking – wordpress status tracking plugin +1 more Order Tracking Pro <= 3.3.6 - Authenticated (Administrator+) Stored Cross-Site Scripting CVE-2023-4500 4.7 MediumAugust 31, 2023
• fivestarplugins five star restaurant reservations, five star restaurant menu +1 more WordPress Five Star Restaurant Reservations Plugin <= 2.6.7 is vulnerable to Cross Site Scripting (XSS) CVE-2023-34017 7.1 HighJuly 25, 2023
• etoile web design front end users WordPress Front End Users Plugin <= 3.2.24 is vulnerable to Cross Site Request Forgery (CSRF) CVE-2023-34005 6.5 MediumJuly 17, 2023
• etoilewebdesign ultimate reviews Ultimate Reviews < 2.1.33 - PHP Object Injection CVE-2020-36726 9.8 CriticalJune 7, 2023
• fivestarplugins five star restaurant reservations Five Star Restaurant Reservations < 2.4.12 - Unauthenticated Arbitrary Payment Status Update to Stored XSS CVE-2022-0421 6.1 MediumNovember 21, 2022
• Show olderLoading…