PT-2026-45734 · Etoile Web Design Incorporated · Five Star Restaurant Reservations

Evan Nr · CVE-2026-42670 · Published 2026-06-02 · Updated 2026-06-02

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Five Star Restaurant Reservations versions prior to 2.7.15

Description Missing authorization in Etoile Web Design Incorporated Five Star Restaurant Reservations allows for the exploitation of incorrectly configured access control security levels.

Recommendations Update to a version newer than 2.7.14.

Fix

Missing Authorization

Weakness Enumeration

CWE-862

Related Identifiers

CVE-2026-42670

Affected Products

Five Star Restaurant Reservations

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2026-42670 · Security Note
• https://patchstack.com/database/wordpress/plugin/restaurant-reservations/vulnerability/wordpress-five-star-restaurant-reservations-plugin-2-7-14-payment-bypass-vulnerability?_s_id=cve · Note
• https://twitter.com/VulmonFeeds/status/2061795456967918029 · Twitter Post