Skip to content
Noroxi

FiveStarPlugins records

10 published records for vendor fivestarplugins.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
1
With a fix record
50%
Median publish → KEV
No record has entered KEV

Records by year

  1. 21
  2. 22
  3. 23
  4. 24

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

10 records
  • CVE-2020-29045
    48Plan

    The food-and-drink-menu plugin through 2.2.0 for WordPress allows remote attackers to execute arbitrary code because of an unserialize opera

    CriticalCVSS 9.8No exploitEPSS 31%

    fivestarplugins · five star restaurant menuMar 11, 2021

  • CVE-2023-5340
    39Monitor

    Five Star Restaurant Menu and Food Ordering < 2.4.11 - Unauthenticated PHP Object Injection

    CriticalCVSS 9.8No exploitEPSS 1%

    fivestarplugins · five star restaurant menuNov 20, 2023

  • CVE-2023-37985
    35Monitor

    WordPress Five Star Restaurant Menu Plugin <= 2.4.6 is vulnerable to Cross Site Request Forgery (CSRF)

    HighCVSS 8.8No exploitEPSS 0%

    fivestarplugins · five star restaurant menuJul 17, 2023

  • CVE-2022-0421
    24Monitor

    Five Star Restaurant Reservations < 2.4.12 - Unauthenticated Arbitrary Payment Status Update to Stored XSS

    MediumCVSS 6.1No exploitEPSS 1%

    fivestarplugins · five star restaurant reservationsNov 21, 2022

  • CVE-2023-34017
    24Monitor

    WordPress Five Star Restaurant Reservations Plugin <= 2.6.7 is vulnerable to Cross Site Scripting (XSS)

    MediumCVSS 6.1No exploitEPSS 0%

    fivestarplugins · five star restaurant menuJul 25, 2023

  • CVE-2021-24965
    21Monitor

    Five Star Restaurant Reservations < 2.4.8 - Subscriber+ Stored Cross-Site Scripting

    MediumCVSS 5.4No exploitEPSS 1%

    fivestarplugins · five star restaurant reservationsJan 24, 2022

  • CVE-2021-25060
    21Monitor

    Five Star Business Profile and Schema < 2.1.7 - Subscriber+ Page Creation & Settings Update to Stored XSS

    MediumCVSS 5.4No exploitEPSS 1%

    fivestarplugins · five star business profile and schemaFeb 21, 2022

  • CVE-2024-33596
    21Monitor

    WordPress Five Star Restaurant Reservations plugin <= 2.6.16 - Broken Access Control vulnerability

    MediumCVSS 5.3No exploitEPSS 0%

    five star plugins · five star restaurant reservationsApr 29, 2024

  • CVE-2024-24838
    21Monitor

    WordPress Five Star Restaurant Reviews Plugin <= 2.3.5 is vulnerable to Cross Site Scripting (XSS)

    MediumCVSS 5.4No exploitEPSS 0%

    fivestarplugins · five star restaurant menuFeb 5, 2024

  • CVE-2024-5459
    17Monitor

    Restaurant Menu and Food Ordering <= 2.4.16 - Missing Authorization to Menu Creation

    MediumCVSS 4.3No exploitEPSS 0%

    fivestarplugins · five star restaurant menuJun 5, 2024