The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
The Food Menu WordPress plugin before 6.0.2 does not perform any capability or ownership check on its reservation-status update action, which is also exposed to unauthenticated users and gated only by a nonce that is publicly available to visitors, allowing unauthenticated attackers to change the status of arbitrary reservations.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Tlp Food Menu Plugin | — | Update tlp-food-menu plugin to version 6.0.2, or a newer patched version | Oct 30, 2026 | Aug 14, 2026 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub