Skip to content
OpenAdvisories

Product · Rustaurius

Five Star Restaurant Reservations – WordPress Booking Plugin

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.3
    CVE-2026-6498

    Five Star Restaurant Reservations <= 2.7.16 - Unauthenticated Payment Bypass via PHP Type Juggling in 'payment_id' Parameter

    The Five Star Restaurant Reservations plugin for WordPress is vulnerable to a payment bypass via PHP type juggling in versions up to, and including, 2.7.16 This is due to the valid_payment() function using a PHP loose comparison (==) between the attacker-cont…

    Rustaurius Five Star Restaurant Reservations – WordPress Booking Plugin Web / CMS
  • Medium 6.1
    CVE-2025-11496

    Five Star Restaurant Reservations – WordPress Booking Plugin <= 2.7.5 - Unauthenticated Stored Cross-Site Scripting

    The Five Star Restaurant Reservations – WordPress Booking Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'rtb-name' parameter in all versions up to, and including, 2.7.5 due to insufficient input sanitization and output escap…

    Rustaurius Five Star Restaurant Reservations – WordPress Booking Plugin Web / CMS