CVE-2026-0658: falha de média gravidade em Five Star Restaurant Reservations
Five Star Restaurant Reservations < 2.7.9 - Arbitrary Bookings Deletion via CSRF
Publicada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 4.3epss 0.2%
The Five Star Restaurant Reservations WordPress plugin before 2.7.9 does not have CSRF checks in some bulk actions, which could allow attackers to make logged in admins perform unwanted actions, such as deleting bookings via CSRF attacks.
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Produtos afetados
Unknown · Five Star Restaurant ReservationsCVEs relacionadas — Five Star Restaurant Reservations
No mesmo produto, das mais perigosas para as menos.
CVE-2022-0421MEDIUMFive Star Restaurant Reservations < 2.4.12 - Unauthenticated Arbitrary Payment Status Update to Stored XSSEPSS 0.6%CVE-2026-15151HIGHFive Star Restaurant Reservations < 2.7.23 - Booking Manager+ Missing Authorization via rtb_reset_notificationsEPSS 0.4%CVE-2026-15147MEDIUMFive Star Restaurant Reservations < 2.7.23 - Unauthenticated Payment Bypass and Booking Confirmation via IDOREPSS 0.2%