PT-2025-53289 · Unknown · Rustaurius Five Star Restaurant Reservations

Published 2025-12-24 · Updated 2025-12-25 · CVE-2025-68601

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L

Name of the Vulnerable Software and Affected Versions Rustaurius Five Star Restaurant Reservations versions through 2.7.7

Description A Cross-Site Request Forgery (CSRF) issue exists in Rustaurius Five Star Restaurant Reservations restaurant-reservations, potentially allowing attackers to perform actions on behalf of authenticated users. This occurs due to insufficient protection against forged requests originating from malicious websites.

Recommendations Update Rustaurius Five Star Restaurant Reservations to a version greater than 2.7.7.

Fix

CSRF

Weakness Enumeration

CWE-352

Related Identifiers

CVE-2025-68601

Affected Products

Rustaurius Five Star Restaurant Reservations

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2025-68601 · Security Note
• https://twitter.com/CVEnew/status/2003932333842276835 · Twitter Post
• https://vdp.patchstack.com/database/Wordpress/Plugin/restaurant-reservations/vulnerability/wordpress-five-star-restaurant-reservations-plugin-2-7-7-cross-site-request-forgery-csrf-vulnerability?_s_id=cve · Note
• https://twitter.com/TheHackerWire/status/2004005813321629780 · Twitter Post
• https://patchstack.com/database/Wordpress/Plugin/restaurant-reservations/vulnerability/wordpress-five-star-restaurant-reservations-plugin-2-7-7-cross-site-request-forgery-csrf-vulnerability?_s_id=cve · Note