rustaurius vulnerabilities

CVEs per yearBy the year they were published

1. 20233
2. 20243
3. 202519
4. 20269

Newest CVEs

• CVE-2026-94391

  WordPress Ultimate FAQ plugin <= 2.4.14 - Cross Site Scripting (XSS) vulnerability

  Rustaurius · Ultimate FAQ

  Medium6.5
• CVE-2026-27436

  WordPress Five Star Business Profile and Schema plugin <= 2.3.19 - Arbitrary Code Execution vulnerability

  Rustaurius · Five Star Business Profile and Schema

  Critical9.1
• CVE-2026-54835

  WordPress Five Star Restaurant Menu plugin <= 2.5.2 - Broken Access Control vulnerability

  Rustaurius · Five Star Restaurant Menu

  High7.5
• CVE-2026-6498

  Five Star Restaurant Reservations <= 2.7.16 - Unauthenticated Payment Bypass via PHP Type Juggling in 'payment_id' Parameter

  rustaurius · Five Star Restaurant Reservations – WordPress Booking Plugin

  Medium5.3
• CVE-2026-4336

  Ultimate FAQ Accordion Plugin <= 2.4.7 - Authenticated (Author+) Stored Cross-Site Scripting via FAQ Content

  rustaurius · Ultimate FAQ Accordion Plugin

  Medium6.4
• CVE-2026-39602

  WordPress Order Tracking plugin <= 3.4.3 - Broken Access Control vulnerability

  Rustaurius · Order Tracking

  Medium5.3
• CVE-2026-25327

  WordPress Five Star Restaurant Reservations plugin <= 2.7.9 - Broken Access Control vulnerability

  Rustaurius · Five Star Restaurant Reservations

  Medium6.5
• CVE-2026-24634

  WordPress Ultimate Reviews plugin <= 3.2.16 - Insecure Direct Object References (IDOR) vulnerability

  Rustaurius · Ultimate Reviews

  Medium5.3
• CVE-2025-68044

  WordPress Five Star Restaurant Reservations plugin <= 2.7.4 - Insecure Direct Object References (IDOR) vulnerability

  Rustaurius · Five Star Restaurant Reservations

  High8.6
• CVE-2025-68601

  WordPress Five Star Restaurant Reservations plugin <= 2.7.8 - Cross Site Request Forgery (CSRF) vulnerability

  Rustaurius · Five Star Restaurant Reservations

  Medium5.4