WordPress Plugin Vulnerabilities

Five Star Restaurant Reservations – WordPress Booking Plugin < 2.8.0 - Unauthenticated Information Exposure

Description

The Five Star Restaurant Reservations – WordPress Booking Plugin plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.7.24. This makes it possible for unauthenticated attackers to extract sensitive user or configuration data.

Affects Plugins

Plugin icon
restaurant-reservations
Fixed in 2.8.0

References

CVE
CVE-2026-103334
URL
https://www.wordfence.com/threat-intel/vulnerabilities/id/0c7b7c7b-8bcb-4ff9-904c-5b4428e34644

Classification

Type
SENSITIVE DATA DISCLOSURE
OWASP top 10
A3: Sensitive Data Exposure
CWE
CWE-200
CVSS
5.3 (medium)

Miscellaneous

Original Researcher
Ananda Dhakal
Verified
No
WPVDB ID
7ab815f5-cb2d-47b1-bb3e-a6627a2fe9c4

Timeline

Publicly Published
2026-10-03 (about 26 days ago)
Added
2026-10-08 (about 21 days ago)
Last Updated
2026-10-08 (about 21 days ago)

Other

Published
Title
Published
2026-06-03
Title
Themeco Cornerstone < 7.8.8 (Premium, bundled with X Theme) - Subscriber+ Arbitrary User Password Hash Disclosure
Published
2026-10-05
Title
User Private Files < 2.1.9 - Subscriber+ User Email Address Disclosure via dpk_upvf_rmv_access
Published
2026-09-21
Title
WP-CRM System < 3.4.7 - Authenticated (Contributor+) Exposure of Sensitive Information via 'contact_id' Parameter
Published
2026-07-10
Title
Context Blog < 1.3.6 - Unauthenticated Sensitive Information Exposure via 'postID' Parameter
Published
2026-02-03
Title
Chapa Payment Gateway Plugin for WooCommerce <= 1.0.3 - Unauthenticated Sensitive Information Exposure