CyberAlerts is shutting down on June 30th, 2025. Thank you for your support!

CVE-2025-30861: WordPress Five Star Restaurant Reservations plugin <= 2.6.29 - Broken Access Control vulnerability

4.9 CVSS

Description

Missing Authorization vulnerability in Rustaurius Five Star Restaurant Reservations allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Five Star Restaurant Reservations: from n/a through 2.6.29.

Classification

CVE ID: CVE-2025-30861

CVSS Base Severity: MEDIUM

CVSS Base Score: 4.9

CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Problem Types

CWE-862 Missing Authorization

Affected Products

Vendor: Rustaurius

Product: Five Star Restaurant Reservations

Exploit Prediction Scoring System (EPSS)

EPSS Score: 0.04% (probability of being exploited)

EPSS Percentile: 13.14% (scored less or equal to compared to others)

EPSS Date: 2025-04-25 (when was this score calculated)

References

https://nvd.nist.gov/vuln/detail/CVE-2025-30861
https://patchstack.com/database/wordpress/plugin/restaurant-reservations/vulnerability/wordpress-five-star-restaurant-reservations-plugin-2-6-29-broken-access-control-vulnerability?_s_id=cve

Timeline