VULNERABILITY INTELLIGENCE
CVE-2026-0658
CVSS score4.3 MEDIUM
EPSS probability0.15%
CISA KEVNot currently listed
Published2026-02-02
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Description
The Five Star Restaurant Reservations WordPress plugin before 2.7.9 does not have CSRF checks in some bulk actions, which could allow attackers to make logged in admins perform unwanted actions, such as deleting bookings via CSRF attacks.
Weakness classification
- 134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-352