sales@hackhalt.com
Free Download

Live Vulnerability Intelligence

Threat Database

Search CVEs, inspect descriptions, and open detail pages with AI-assisted technical context.

Total10
Critical1
High4
Medium5
Reset
Showing 1-10 of 10 records
Threat Entry Updated 2026-10-06

Restaurant Reservations - Security Vulnerability (CVE-2026-103334)

Insertion of Sensitive Information Into Sent Data vulnerability in Etoile Web Design Incorporated Five Star Restaurant Reservations restaurant-reservations allows Retrieve Embedded Sensitive Data.This issue affects Five Star Restaurant Reservations: from n/a through 2.7.24.

PLUGIN Restaurant Reservations

CVE-2026-103334

HIGH CVSS 7.5 2026-10-05
Open Full Technical Breakdown
Threat Entry Updated 2026-07-22

Restaurant Reservations - Broken Access Control (CVE-2026-42670)

Missing Authorization vulnerability in Etoile Web Design Incorporated Five Star Restaurant Reservations allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Five Star Restaurant Reservations: from n/a through 2.7.14.

PLUGIN Restaurant Reservations

CVE-2026-42670

HIGH CVSS 7.5 2026-06-02
Open Full Technical Breakdown
Threat Entry Updated 2026-06-17

Restaurant Reservations - Security Vulnerability (CVE-2026-6498)

The Five Star Restaurant Reservations plugin for WordPress is vulnerable to a payment bypass via PHP type juggling in versions up to, and including, 2.7.16 This is due to the valid_payment() function using a PHP loose comparison (==) between the attacker-controlled payment_id POST parameter and the booking's stripe_payment_intent_id property. When an unauthenticated attacker submits a request to the nopriv AJAX handler rtb_stripe_pmt_succeed before the Stripe payment intent has been created for a booking (i.e., before the JavaScript-triggered create_stripe_pmtIntnt() call has stored an intent ID in post meta), the stripe_payment_intent_id property…

PLUGIN Restaurant Reservations

CVE-2026-6498

MEDIUM CVSS 5.3 2026-04-30
Open Full Technical Breakdown
Threat Entry Updated 2026-06-17

Restaurant Reservations - Broken Access Control (CVE-2025-68044)

Authorization Bypass Through User-Controlled Key vulnerability in Rustaurius Five Star Restaurant Reservations restaurant-reservations allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Five Star Restaurant Reservations: from n/a through

PLUGIN Restaurant Reservations

CVE-2025-68044

HIGH CVSS 8.6 2026-01-05
Open Full Technical Breakdown
Threat Entry Updated 2026-06-17

Restaurant Reservations - Path Traversal (CVE-2024-1382)

The Restaurant Reservations plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.9 via the nd_rst_layout attribute of the nd_rst_search shortcode. This makes it possible for authenticated attackers, with contributor-level access and above, to include and execute arbitrary PHP files on the server, allowing the execution of any PHP code in those files. This can be used to bypass access controls, obtain sensitive data, or achieve code execution in cases where an uploaded PHP file may not be directly accessible.

PLUGIN Restaurant Reservations

CVE-2024-1382

HIGH CVSS 8.8 2024-03-07
Open Full Technical Breakdown

WordPress security that blocks attacks before they land.

sales@hackhalt.com

Product

Resources

Company

© Hack Halt Inc. All rights reserved.