cleantalk
Vulnerabilities and Security Researches

Vulnerabilities and security researches forwp-food-manager wp-food-manager

Direction: ascending
Jun 07, 2024

WP Food Manager – Restaurant Menu & Online Food Ordering for WooCommerce – Food Delivery & Pickup – Table # CVE-2023-0604

CVE, Research URL

CVE-2023-0604

Home page URL

Security reports for WP Food Manager – Restaurant Menu & Online Food Ordering for WooCommerce – Food Delivery & Pickup – Table

Application

WP Food Manager – Restaurant Menu & Online Food Ordering for WooCommerce – Food Delivery & Pickup – Table

Date
Aug 07, 2023
Research Description
The WP Food Manager WordPress plugin before 1.0.4 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)
Affected versions
max 1.0.4.
Status
vulnerable