Vulnerabilidades em rustaurius

33 resultados
Análise Vexday

Rustaurius apresenta 14 vulnerabilidades catalogadas, com 2 classificadas como críticas e nenhuma sob exploração ativa conhecida, sugerindo risco contido no curto prazo. A fraqueza dominante é CWE-79 (Cross-site Scripting), indicando deficiências em validação de entrada, enquanto apenas 1 CVE foi publicada nos últimos 90 dias, refletindo descobertas pontuais e não um padrão recente de exposição.

CVE-2025-68044HIGHWordPress Five Star Restaurant Reservations plugin <= 2.7.4 - Insecure Direct Object References (IDOR) vulnerabilityEPSS 0.2%CVE-2026-4336MEDIUMUltimate FAQ Accordion Plugin <= 2.4.7 - Authenticated (Author+) Stored Cross-Site Scripting via FAQ ContentEPSS 0.2%CVE-2025-11799MEDIUMAffiliate AI Lite <= 1.0.1 - Authenticated (Contributor+) Stored Cross-Site ScriptingEPSS 0.2%CVE-2026-39602MEDIUMWordPress Order Tracking plugin <= 3.4.3 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2026-25327MEDIUMWordPress Five Star Restaurant Reservations plugin <= 2.7.9 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2026-24634MEDIUMWordPress Ultimate Reviews plugin <= 3.2.16 - Insecure Direct Object References (IDOR) vulnerabilityEPSS 0.2%CVE-2025-58235MEDIUMWordPress Front End Users plugin <= 3.2.35 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2026-6498MEDIUMFive Star Restaurant Reservations <= 2.7.16 - Unauthenticated Payment Bypass via PHP Type Juggling in 'payment_id' ParameterEPSS 0.2%CVE-2025-62072MEDIUMWordPress Front End Users plugin <= 3.2.33 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2025-11496MEDIUMFive Star Restaurant Reservations – WordPress Booking Plugin <= 2.7.5 - Unauthenticated Stored Cross-Site ScriptingEPSS 0.2%CVE-2025-47466MEDIUMWordPress Ultimate WP Mail plugin <= 1.3.4 - Cross Site Request Forgery (CSRF) VulnerabilityEPSS 0.2%CVE-2025-67590MEDIUMWordPress Ultimate FAQ plugin <= 2.4.3 - Cross Site Request Forgery (CSRF) vulnerabilityEPSS 0.1%CVE-2025-68601MEDIUMWordPress Five Star Restaurant Reservations plugin <= 2.7.8 - Cross Site Request Forgery (CSRF) vulnerabilityEPSS 0.1%