https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-08T17:15:18.386389+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cnvd-2026-34500 cnvd-2026-34500 2026-10-08T17:15:18.388069+00:00 cnvd-2026-34500 https://vulnerability.circl.lu/vuln/fkie_cve-2026-13328 fkie_cve-2026-13328 2026-10-08T17:15:18.388103+00:00

The Food Menu WordPress plugin before 6.0.2 does not perform any capability or ownership check on its reservation-status update action, which is also exposed to unauthenticated users and gated only by a nonce that is publicly available to visitors, allowing unauthenticated attackers to change the status of arbitrary reservations.

 https://vulnerability.circl.lu/vuln/ghsa-8c32-fr4q-6r3j GHSA-8c32-fr4q-6r3j 2026-10-08T17:15:18.388138+00:00

The Food Menu WordPress plugin before 6.0.2 does not perform any capability or ownership check on its reservation-status update action, which is also exposed to unauthenticated users and gated only by a nonce that is publicly available to visitors, allowing unauthenticated attackers to change the status of arbitrary reservations.