Skip to content
OpenAdvisories

Vendor

nikelschubert

3 known vulnerabilities.

Products

Easy restaurant menu manager 2 Beautiful Cookie Consent Banner 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 4.3
    CVE-2025-8491

    Easy restaurant menu manager <= 2.0.2 - Cross-Site Request Forgery to Menu Upload

    The Easy restaurant menu manager plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.0.2. This is due to missing or incorrect nonce validation on the nsc_eprm_save_menu() function. This makes it possible fo…

    nikelschubert Easy restaurant menu manager Web / CMS
  • Medium 6.4
    CVE-2025-6673

    Easy restaurant menu manager <= 2.0.1 - Authenticated (Contributot+) Stored Cross-Site Scripting via `nsc_eprm_menu_link` Shortcode

    The Easy restaurant menu manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's nsc_eprm_menu_link shortcode in versions up to, and including 2.0.1, due to insufficient input sanitization and output escaping on user supplie…

    nikelschubert Easy restaurant menu manager Web / CMS