Description
The RestroPress – Online Food Ordering System plugin for WordPress is vulnerable to Authentication Bypass in versions 3.0.0 to 3.1.9.2. This is due to the plugin exposing user private tokens and API data via the /wp-json/wp/v2/users REST API endpoint. This makes it possible for unauthenticated attackers to forge JWT tokens for other users, including administrators, and authenticate as them.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| magnigenie | RestroPress – Online Food Ordering System | 3.0.0 – ≤ 3.1.9.2 | — |
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
GitHub 1 repository
-
Nxploited/CVE-2025-9209 ★ 1 · Nov 5, 2025
RestroPress – Online Food Ordering System 3.0.0 - 3.1.9.2 - Unauthenticated Information Exposure to Authentication Bypass via Forged JWT
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
Automated scanner template
A ready-made Nuclei template detects this vulnerability automatically. Vulnerabilities with public scanner templates are typically probed across the internet soon after the template appears — exposed systems should be patched first.
- RestroPress 3.0.0-3.2.1 - Authentication Bypass http/cves/2025/CVE-2025-9209.yaml
Source: projectdiscovery/nuclei-templates (MIT) — updated daily. Only links are listed.