Skip to content
OpenAdvisories

Vendor

Rustaurius

34 known vulnerabilities.

Products

Front End Users 9 Ultimate WP Mail 6 Five Star Restaurant Reservations 4 Ultimate Reviews 3 Five Star Restaurant Reservations – WordPress Booking Plugin 2 Ultimate FAQ 2 Order Tracking – WordPress Status Tracking Plugin 2 Five Star Restaurant Menu 1 Five Star Restaurant Menu and Food Ordering 1 Ultimate FAQ Accordion Plugin 1 Affiliate AI Lite 1 Five Star Business Profile and Schema 1 Order Tracking 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Critical 9.1
    CVE-2026-27436

    WordPress Five Star Business Profile and Schema plugin <= 2.3.19 - Arbitrary Code Execution vulnerability

    Editor Arbitrary Code Execution in Five Star Business Profile and Schema <= 2.3.19 versions.

    Rustaurius Five Star Business Profile and Schema
  • Critical 9.8
    CVE-2025-2005 Public exploit EPSS 22%

    Front-End-Only-Users <= 3.2.32 - Unauthenticated Arbitrary File Upload

    The Front End Users plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the file uploads field of the registration form in all versions up to, and including, 3.2.32. This makes it possible for unauthenticated at…

    Rustaurius Front End Users Web / CMS
  • Critical 9.8
    CVE-2020-36726

    Ultimate Reviews < 2.1.33 - PHP Object Injection

    The Ultimate Reviews plugin for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 2.1.32 via deserialization of untrusted input in several vulnerable functions. This allows unauthenticated attackers to inject a PHP Object. No P…

    Rustaurius Ultimate Reviews Web / CMS