Beveiligingsadvies

CVE-2026-13328

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-08-13 06:00:12

Laatst bijgewerkt 2026-08-14 18:58:44

Toegewezen door WPScan

CVSS-score 5.3

Status PUBLISHED

Beschrijving

The Food Menu WordPress plugin before 6.0.2 does not perform any capability or ownership check on its reservation-status update action, which is also exposed to unauthenticated users and gated only by a nonce that is publicly available to visitors, allowing unauthenticated attackers to change the status of arbitrary reservations.

← Alle CVE's bekijken Bekijk op cve.org ↗