CVE-2026-57644
HighCVSS 8.5Summary
The Restaurant Menu by MotoPress plugin version 2.4.10 and earlier contains a SQL injection vulnerability exploitable by contributors. An attacker with contributor privileges can inject malicious SQL queries into the database.
Risk Assessment
The risk includes unauthorized access to data, its modification or deletion, which may lead to a breach of confidentiality and integrity of the WordPress database.
Recommendation
It is recommended to immediately update the Restaurant Menu by MotoPress plugin to the latest available version that fixes this vulnerability.
Other vulnerabilities in Restaurant Menu by MotoPress <= 2.4.10
See all- CVE-2026-73400High
Unauthenticated Local File Inclusion vulnerability in Restaurant Menu by MotoPress versions up to 2.4.11.
- CVE-2025-63078Medium
The Restaurant Menu by MotoPress plugin in versions 2.4.11 and earlier contains a vulnerability related to broken access control by subscribers. Users with the subscriber role can gain unauthorized access to restaurant menu management functions.
Original NVD description (English source)
Contributor SQL Injection in Restaurant Menu by MotoPress <= 2.4.10 versions.