Live Vulnerability Intelligence
Threat Database
Search CVEs, inspect descriptions, and open detail pages with AI-assisted technical context.
Threat Entry
Updated 2026-09-25
Restaurant Menu and Food Ordering - Security Vulnerability (CVE-2026-96568)
The Restaurant Menu and Food Ordering plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'phone_number' parameter in all versions up to, and including, 2.4.14 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
PLUGIN
Restaurant Menu and Food Ordering
CVE-2026-96568
Risk Score
Threat Entry
Updated 2026-09-08
Restaurant Menu and Food Ordering - Security Vulnerability (CVE-2026-84044)
The Restaurant Menu and Food Ordering WordPress plugin before 2.4.12 does not verify that a PayPal payment notification genuinely originates from PayPal, allowing unauthenticated attackers to forge a payment notification and mark their own order as paid and completed without making any payment.
PLUGIN
Restaurant Menu and Food Ordering
CVE-2026-84044
Risk Score
Threat Entry
Updated 2026-06-17
Restaurant Menu and Food Ordering - Broken Access Control (CVE-2024-5459)
The Restaurant Menu and Food Ordering plugin for WordPress is vulnerable to unauthorized creation of data due to a missing capability check on 'add_section', 'add_menu', 'add_menu_item', and 'add_menu_page' functions in all versions up to, and including, 2.4.16. This makes it possible for authenticated attackers, with Subscriber-level access and above, to create menu sections, menus, food items, and new menu pages.
PLUGIN
Restaurant Menu and Food Ordering
CVE-2024-5459
Risk Score