Plugin icon

Five Star Restaurant Reservations – WordPress Booking Plugin

restaurant-reservations

Vulnerabilities:

11

Last Updated:

April 29, 2026

Active Installs:

10000

Published
Title
Fixed in
CVSS
Published
2026-04-29
Title
Five Star Restaurant Reservations < 2.7.17 - Unauthenticated Payment Bypass via PHP Type Juggling in 'payment_id' Parameter
Fixed in
Fixed in 2.7.17
CVSS
5.3 (medium)
Published
2026-03-23
Title
Five Star Restaurant Reservations – WordPress Booking Plugin < 2.7.10 - Missing Authorization
Fixed in
Fixed in 2.7.10
CVSS
5.3 (medium)
Published
2026-01-12
Title
Five Star Restaurant Reservations < 2.7.9 - Arbitrary Bookings Deletion via CSRF
Fixed in
Fixed in 2.7.9
CVSS
4.3 (medium)
Published
2026-01-02
Title
Five Star Restaurant Reservations < 2.7.5 - Unauthenticated Insecure Direct Object Reference
Fixed in
Fixed in 2.7.5
CVSS
5.3 (medium)
Published
2025-12-24
Title
Five Star Restaurant Reservations < 2.7.9 - Cross-Site Request Forgery
Fixed in
Fixed in 2.7.9
CVSS
4.3 (medium)
Published
2025-12-20
Title
Five Star Restaurant Reservations – WordPress Booking Plugin < 2.7.7 - Unauthenticated Stored Cross-Site Scripting
Fixed in
Fixed in 2.7.7
CVSS
6.1 (medium)
Published
2025-03-27
Title
Five Star Restaurant Reservations < 2.6.30 - Missing Authorization
Fixed in
Fixed in 2.6.30
CVSS
4.3 (medium)
Published
2024-04-25
Title
Five Star Restaurant Reservations < 2.6.17 - Missing Authorization
Fixed in
Fixed in 2.6.17
CVSS
4.3 (medium)
Published
2023-06-23
Title
Five Star Restaurant Reservations < 2.6.8 - Reflected Cross-Site Scripting
Fixed in
Fixed in 2.6.8
CVSS
7.1 (high)
Published
2022-02-05
Title
Five Star Restaurant Reservations < 2.4.12 - Unauthenticated Arbitrary Payment Status Update to Stored XSS
Fixed in
Fixed in 2.4.12
CVSS
8.8 (high)
Published
2021-12-21
Title
Five Star Restaurant Reservations < 2.4.8 - Subscriber+ Stored Cross-Site Scripting
Fixed in
Fixed in 2.4.8
CVSS
8.0 (high)