PT-2024-25365 · Five Star Plugins · Five Star Restaurant Reservations

Steven Julian · Published 2024-04-29 · Updated 2024-04-29 · CVE-2024-33596

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions Five Star Restaurant Reservations versions n/a through 2.6.16

Description The issue is related to a Missing Authorization vulnerability in Five Star Plugins Five Star Restaurant Reservations.

Recommendations For versions n/a through 2.6.16, update to a version later than 2.6.16 to resolve the issue.

Fix

Missing Authorization

Weakness Enumeration

CWE-862

Related Identifiers

CVE-2024-33596

Affected Products

Five Star Restaurant Reservations

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2024-33596 · Security Note
• https://twitter.com/CVEnew/status/1784865469695967544 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1784897815665164530 · Twitter Post
• https://patchstack.com/database/vulnerability/restaurant-reservations/wordpress-five-star-restaurant-reservations-plugin-2-6-16-broken-access-control-vulnerability?_s_id=cve · Note
• https://t.me/cvenotify/78352 · Telegram Post