Medium · 4.3 CVE-2024-49698 EUVD-2024-43709GHSA-chj4-5w8w-6gg4

WordPress Great Restaurant Menu WP plugin <= 1.4.2 - Broken Access Control vulnerability

Published Dec 31, 2024 · Updated May 11, 2026 · Assigned by Patchstack

Vendor: PriceListo Product: Best Restaurant Menu by PriceListo

Description

Missing Authorization vulnerability in PriceListo Best Restaurant Menu by PriceListo best-restaurant-menu-by-pricelisto.This issue affects Best Restaurant Menu by PriceListo: from n/a through <= 1.4.2.

Affected products

Vendor	Product	Affected	Fixed
PriceListo	Best Restaurant Menu by PriceListo	≤ 1.4.2	—

References

https://patchstack.com/database/Wordpress/Plugin/best-restaurant-menu-by-pricelisto/vulnerability/wordpress-great-restaurant-menu-wp-plugin-1-4-2-broken-access-control-vulnerability?_s_id=cve vdb-entry