PT-2026-5611 · WordPress · Five Star Restaurant Reservations

Bob Matyas · Publicado 2026-02-02 · Atualizado 2026-02-02 · CVE-2026-0658

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Média

Vetor base

AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions Five Star Restaurant Reservations WordPress plugin versions prior to 2.7.9

Description The plugin lacks CSRF checks in certain bulk actions. This could allow attackers to make logged-in administrators perform unintended actions, such as deleting bookings, through Cross-Site Request Forgery attacks. The affected actions involve bulk operations performed by administrators.

Recommendations Update the Five Star Restaurant Reservations WordPress plugin to version 2.7.9 or later.

Exploit

Correção

CSRF

Enumeração de Fraquezas

CWE-352

Identificadores relacionados

CVE-2026-0658

Produtos afetados

Five Star Restaurant Reservations

Referências · 5

• 🔥 https://wpscan.com/vulnerability/6e39090e-a4b2-4c16-806f-e2b1c456fb00 · Exploit
• https://twitter.com/CVEnew/status/2018227772485669195 · Publicação no Twitter
• https://t.me/CVEtracker/43455 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2026-0658 · Nota de Segurança
• https://twitter.com/VulmonFeeds/status/2018233412599824484 · Publicação no Twitter