Veille CVE

Recherche « Unknown Five Star Restaurant Reservations »

2 CVE

Critique 0 Élevée 1 Moyenne 1 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « Unknown Five Star Restaurant Reservations » ✕
  1. CVE-2026-15147 5.3 Moyenne

    Unknown Five Star Restaurant Reservations

    The Five Star Restaurant Reservations WordPress plugin before 2.7.23 does not verify the authenticity of incoming payment notifications, failing to validate the payment recipient, amount, and status or to bind the notification to the intended booking, allowing unauthenticated attackers to mark arbitrary pending reservations as paid and confirmed.

  2. CVE-2026-15151 7.5 Élevée

    Unknown Five Star Restaurant Reservations

    The Five Star Restaurant Reservations WordPress plugin before 2.7.23 does not perform a capability check on one of its AJAX actions, allowing users with the lowest booking-management role (which by default cannot access the Five Star Restaurant Reservations WordPress plugin before 2.7.23's settings) to reset the site's configured booking notification rules.