Unknown Food Menu vulnerabilities

1 vulnerability

Known vulnerabilities in Unknown Food Menu, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

5.3MediumCVE-2026-13328unknown · food menu +1 moreTLP Food Menu < 6.0.2 - Unauthenticated Reservation Status ModificationThe Food Menu WordPress plugin before 6.0.2 does not perform any capability or ownership check on its reservation-status update action, which is also exposed to unauthenticated users and gated only by a nonce that is publicly available to visitors, allowing unauthenticated attackers to change the status of arbitrary reservations.EPSS0.30%