Five Star Restaurant Reservations – WordPress Booking Plugin

Wordfence Intelligence   >   Vulnerability Database   >   WordPress Plugins   >   Five Star Restaurant Reservations – WordPress Booking Plugin

Information

Software Type Plugin
Software Slug restaurant-reservations (view on wordpress.org)
Software Status Active
Software Author rustaurius
Software Website www.fivestarplugins.com
Software Downloads 1,097,357
Software Active Installs 10,000
Software Record Last Updated July 11, 2026

12 Vulnerabilities

Submit a Vulnerability
Five Star Restaurant Reservations – WordPress Booking Plugin <= 2.7.19 - Missing Authorization
5.3
CVE-2026-54830
Jun 17, 2026
Researcher: Vincent Sevkli
Five Star Restaurant Reservations – WordPress Booking Plugin <= 2.7.14 - Missing Authorization
5.3
CVE-2026-42670
May 12, 2026
Researcher: Evan NR
Five Star Restaurant Reservations <= 2.7.16 - Unauthenticated Payment Bypass via PHP Type Juggling in 'payment_id' Parameter
5.3
CVE-2026-6498
Apr 29, 2026
Researcher: davidfdzmorilla
Five Star Restaurant Reservations – WordPress Booking Plugin <= 2.7.9 - Missing Authorization
5.3
CVE-2026-25327
Mar 23, 2026
Researcher: johska
Five Star Restaurant Reservations <= 2.7.4 - Unauthenticated Insecure Direct Object Reference
5.3
CVE-2025-68044
Jan 2, 2026
Researcher: daroo
Five Star Restaurant Reservations <= 2.7.8 - Cross-Site Request Forgery
4.3
CVE-2025-68601
Dec 24, 2025
Researcher: benzdeus
Five Star Restaurant Reservations – WordPress Booking Plugin <= 2.7.5 - Unauthenticated Stored Cross-Site Scripting
6.1
CVE-2025-11496
Dec 20, 2025
Researcher: zer0gh0st
Five Star Restaurant Reservations <= 2.6.29 - Missing Authorization
4.3
CVE-2025-30861
Mar 27, 2025
Researcher: Revan Arifio
Five Star Restaurant Reservations <= 2.6.16 - Missing Authorization
4.3
CVE-2024-33596
Apr 25, 2024
Researcher: Steven Julian
Five Star Restaurant Reservations <= 2.6.7 - Reflected Cross-Site Scripting
6.1
CVE-2023-34017
Jun 23, 2023
Researcher: yuyudhn
Five Star Restaurant Reservations <= 2.4.11 - Missing Authorization to Stored Cross-Site Scripting
7.2
CVE-2022-0421
Oct 31, 2022
Researcher: Krzysztof Zając
Five Star Restaurant Reservations <= 2.4.7 - Subscriber+ Stored Cross-Site Scripting
6.4
CVE-2021-24965
Dec 21, 2021
Researcher: Krzysztof Zając
Title Status CVE ID CVSS Researchers Date
Five Star Restaurant Reservations – WordPress Booking Plugin <= 2.7.19 - Missing Authorization Patched CVE-2026-54830 5.3 Vincent Sevkli June 17, 2026
Five Star Restaurant Reservations – WordPress Booking Plugin <= 2.7.14 - Missing Authorization Patched CVE-2026-42670 5.3 Evan NR May 12, 2026
Five Star Restaurant Reservations <= 2.7.16 - Unauthenticated Payment Bypass via PHP Type Juggling in 'payment_id' Parameter Patched CVE-2026-6498 5.3 davidfdzmorilla April 29, 2026
Five Star Restaurant Reservations – WordPress Booking Plugin <= 2.7.9 - Missing Authorization Patched CVE-2026-25327 5.3 johska March 23, 2026
Five Star Restaurant Reservations <= 2.7.4 - Unauthenticated Insecure Direct Object Reference Patched CVE-2025-68044 5.3 daroo January 2, 2026
Five Star Restaurant Reservations <= 2.7.8 - Cross-Site Request Forgery Patched CVE-2025-68601 4.3 benzdeus December 24, 2025
Five Star Restaurant Reservations – WordPress Booking Plugin <= 2.7.5 - Unauthenticated Stored Cross-Site Scripting Patched CVE-2025-11496 6.1 zer0gh0st December 20, 2025
Five Star Restaurant Reservations <= 2.6.29 - Missing Authorization Patched CVE-2025-30861 4.3 Revan Arifio March 27, 2025
Five Star Restaurant Reservations <= 2.6.16 - Missing Authorization Patched CVE-2024-33596 4.3 Steven Julian April 25, 2024
Five Star Restaurant Reservations <= 2.6.7 - Reflected Cross-Site Scripting Patched CVE-2023-34017 6.1 yuyudhn June 23, 2023
Five Star Restaurant Reservations <= 2.4.11 - Missing Authorization to Stored Cross-Site Scripting Patched CVE-2022-0421 7.2 Krzysztof Zając October 31, 2022
Five Star Restaurant Reservations <= 2.4.7 - Subscriber+ Stored Cross-Site Scripting Patched CVE-2021-24965 6.4 Krzysztof Zając December 21, 2021

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation