Medium · 4.3 CVE-2023-37985 EUVD-2023-41812GHSA-vgq4-q6x5-pr48

WordPress Five Star Restaurant Menu Plugin <= 2.4.6 is vulnerable to Cross Site Request Forgery (CSRF)

Published Jul 17, 2023 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Cross-Site Request Forgery (CSRF) vulnerability in FiveStarPlugins Restaurant Menu and Food Ordering plugin <= 2.4.6 versions.

Vendor	Product	Affected	Fixed
FiveStarPlugins	Restaurant Menu and Food Ordering by Five Star Plugins	≤ 2.4.6	—