Thingsforrestaurants Quick Restaurant Menu — known CVE vulnerabilities

Every CVE whose affected-product data names Thingsforrestaurants Quick Restaurant Menu, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (4)

• CVE-2023-0550 — CVSS 8.1 (high): The Quick Restaurant Menu plugin for WordPress is vulnerable to Insecure Direct Object Reference in versions up to, and including, 2.0.2…
• CVE-2023-0554 — CVSS 8.1 (high): The Quick Restaurant Menu plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.0.2. This is…
• CVE-2023-0555 — CVSS 8.1 (high): The Quick Restaurant Menu plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on its AJAX actions…
• CVE-2023-0553 — CVSS 4.4 (medium): The Quick Restaurant Menu plugin for WordPress is vulnerable to Stored Cross-Site Scripting via its settings parameters in versions up to…