Skip to content
OpenAdvisories
High · 8.8 CVE-2025-30846 EUVD-2025-8334GHSA-p8xc-gghv-3vfp

WordPress Restaurant Menu by MotoPress plugin <= 2.4.4 - Local File Inclusion vulnerability

Published Mar 27, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in jetmonsters Restaurant Menu by MotoPress mp-restaurant-menu allows PHP Local File Inclusion.This issue affects Restaurant Menu by MotoPress: from n/a through <= 2.4.4.

Affected products

VendorProductAffectedFixed
jetmonsters Restaurant Menu by MotoPress ≤ 2.4.4 —

References