WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
restaurant-reservations
Published
2026-01-02
Title
Five Star Restaurant Reservations < 2.7.5 - Unauthenticated Insecure Direct Object Reference
Slug
restaurant-reservations
Published
2026-03-23
Title
Five Star Restaurant Reservations – WordPress Booking Plugin < 2.7.10 - Missing Authorization
Slug
restaurant-reservations
Published
2026-04-29
Title
Five Star Restaurant Reservations < 2.7.17 - Unauthenticated Payment Bypass via PHP Type Juggling in 'payment_id' Parameter
Slug
restaurant-reservations
Published
2026-05-12
Title
Five Star Restaurant Reservations – WordPress Booking Plugin < 2.7.15 - Missing Authorization
Slug
restaurant-reservations
Published
2026-06-17
Title
Five Star Restaurant Reservations – WordPress Booking Plugin < 2.7.20 - Missing Authorization
Slug
restaurant-reservations
Published
2026-07-20
Title
Five Star Restaurant Reservations < 2.7.23 - Booking Manager+ Missing Authorization via rtb_reset_notifications
Slug
restaurant-reservations
Published
2026-07-20
Title
Five Star Restaurant Reservations < 2.7.23 - Unauthenticated Payment Bypass and Booking Confirmation via IDOR
Slug
restaurant-solutions-checklist
Published
2024-02-28
Title
Restaurant Solutions – Checklist 1.0.0 - Authenticated (Admin+) Stored Cross-Site Scripting
Slug
restaurantconnect-reswidget
Published
2024-10-09
Title
Restaurant Reservations Widget <= 1.0 - Reflected Cross-Site Scripting
Slug
restful-syndication
Published
2025-10-31
Title
RESTful Content Syndication 1.1.0 - 1.5.0 - Authenticated (Contributor+) Arbitrary File Upload
Slug
restore-paypal-standard-for-woocommerce
Published
2026-08-05
Title
Restore PayPal Standard for WooCommerce < 4.0.0 - Payment Bypass via Unvalidated receiver_email
Slug
restore-paypal-standard-for-woocommerce
Published
2026-08-05
Title
Restore PayPal Standard for WooCommerce < 3.1.1 - Payment Bypass via PDT Underpayment
Slug
restore-permanently-delete-post-or-page-data
Published
2025-08-22
Title
Restore Permanently delete Post or Page Data <= 1.0 - Cross-Site Request Forgery
Slug
restrict-anonymous-access
Published
2025-01-24
Title
Restrict Anonymous Access < 1.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
restrict-categories
Published
2023-11-07
Title
Restrict Categories <= 2.6.4 - Reflected XSS
Slug
restrict-content
Published
2023-06-26
Title
Membership Plugin - Restrict Content < 3.2.3 - Reflected XSS
Slug
restrict-content
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
restrict-content
Published
2023-11-06
Title
Restrict Content < 3.2.8 - Information Exposure via legacy log file
Slug
restrict-content
Published
2024-04-10
Title
Restrict Content < 3.2.9 - Missing Authorization
Slug
restrict-content
Published
2025-01-25
Title
Membership Plugin – Restrict Content < 3.2.14 - Unauthenticated Content Restriction Bypass to Sensitive Information Exposure
Slug
restrict-content
Published
2025-12-22
Title
Membership Plugin – Restrict Content < 3.2.16 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcodes
Slug
restrict-content
Published
2026-01-15
Title
Membership Plugin – Restrict Content < 3.2.17 - Missing Authentication to Insecure Direct Object Reference and Sensitive Information Exposure
Slug
restrict-content
Published
2026-02-17
Title
Membership Plugin – Restrict Content < 3.2.19 - Authenticated (Administrator+) Stored Cross-Site Scripting via Invoice Settings
Slug
restrict-content
Published
2026-03-04
Title
Membership Plugin – Restrict Content < 3.2.21 - Unauthenticated Privilege Escalation via 'rcp_level'
Slug
restrict-content
Published
2026-03-19
Title
Membership Plugin – Restrict Content < 3.2.25 - Unvalidated Redirect in Password Reset Flow