Threat Database

Threat Entry Updated 2026-11-11

Tlp Food Menu - Security Vulnerability (CVE-2026-125431)

Missing Authorization vulnerability in Mamunur Rashid Food Menu – Restaurant Menu & Online Ordering for WooCommerce tlp-food-menu allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Food Menu – Restaurant Menu & Online Ordering for WooCommerce: from n/a through 6.0.7.

PLUGIN Tlp Food Menu

CVE-2026-125431

MEDIUM CVSS 5.3 2026-11-11

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-10-11

Tlp Food Menu - Security Vulnerability (CVE-2026-42709)

Unauthenticated Cross Site Scripting (XSS) in Food Menu – Restaurant Menu & Online Ordering for WooCommerce

PLUGIN Tlp Food Menu

CVE-2026-42709

HIGH CVSS 7.1 2026-10-10

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

Tlp Food Menu - Broken Access Control (CVE-2024-13415)

The Food Menu – Restaurant Menu & Online Ordering for WooCommerce plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the response() function in all versions up to, and including, 5.1.4. This makes it possible for authenticated attackers, with Subscriber-level access and above, to modify the plugin's settings.

PLUGIN Tlp Food Menu

CVE-2024-13415

MEDIUM CVSS 4.3 2025-01-31

Risk Score

Open Full Technical Breakdown