WordPress security by component
Restaurant Menu by MotoPress
Plugin description
Restaurant Menu by MotoPress is a WordPress component with 5 published CVE records in this archive. The latest tracked vulnerability was published Jun 26, 2026; the highest CVE/CNA score is 8.8.
Plugin slug:
mp-restaurant-menuLatest vulnerability
CVE-2026-57644: Restaurant Menu by MotoPress: SQL injection
Restaurant Menu by MotoPress is affected by SQL injection. Exposure depends on how the affected operation is made reachable by the site. A successful request can alter database queries and expose or modify WordPress data. The published affected range is n/a through 2.4.10.
| Safe version |
|
||
|---|---|---|---|
| Jun 26, 2026 |
CVE-2026-57644
Restaurant Menu by MotoPress: SQL injection
Restaurant Menu by MotoPress is affected by SQL injection. Exposure depends on how the affected operation is made reachable by the site. A successful request can alter database queries and expose or modify WordPress data. The published affected range is n/a through 2.4.10.
|
2.4.11 |
CVE8.5
NVDPending
|
| Jun 26, 2026 |
CVE-2025-63078
Restaurant Menu by MotoPress: A security weakness
Restaurant Menu by MotoPress is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation. The published affected range is n/a through 2.4.11.
|
> 2.4.11 |
CVE4.3
NVDPending
|
| Dec 18, 2025 |
CVE-2025-49914
Restaurant Menu by MotoPress: A security weakness
Restaurant Menu by MotoPress is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation.
|
See mitigation notes |
CVE6.5
NVDPending
|
| Jul 16, 2025 |
CVE-2025-54038
Restaurant Menu by MotoPress: Cross-site request forgery
Restaurant Menu by MotoPress is affected by cross-site request forgery. Exposure depends on how the affected operation is made reachable by the site. Exploitation relies on a signed-in privileged user submitting an attacker-controlled request.
|
See mitigation notes |
CVE5.4
NVDPending
|
| Mar 27, 2025 |
CVE-2025-30846
Restaurant Menu by MotoPress: Filesystem traversal
Restaurant Menu by MotoPress is affected by filesystem traversal. Exposure depends on how the affected operation is made reachable by the site. A crafted path can escape the intended directory and reach files or directories elsewhere on the server.
|
See mitigation notes |
CVE8.8
NVDPending
|