CVE-2026-15147

5.3 Moyenne

Publiée le 07/08/2026 à 00:16 · Modifiée le 26/08/2026 à 18:31 · Analyse NVD reportée · Source : contact@wpscan.com

Description

The Five Star Restaurant Reservations WordPress plugin before 2.7.23 does not verify the authenticity of incoming payment notifications, failing to validate the payment recipient, amount, and status or to bind the notification to the intended booking, allowing unauthenticated attackers to mark arbitrary pending reservations as paid and confirmed.

Traduire en français

Produits concernés

Unknown Five Star Restaurant Reservations

Scores CVSS

Version	Score	Source	Vecteur
3.1	5.3 Moyenne	contact@wpscan.com	`CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N`

Faiblesses (CWE)

CWE-345
CWE-639

Références

https://wpscan.com/vulnerability/9cfa5856-3c30-451d-895e-3d68208d834d/

Ailleurs

NVD
CVE.org
CIRCL Vulnerability-Lookup
CERT-FR
GitHub Advisories