CVE-2026-73400
HighCVSS 8.1Exploitation Probability (EPSS)
Low risk37th percentile - higher than 37% of all known CVEs
Summary
Unauthenticated Local File Inclusion vulnerability in Restaurant Menu by MotoPress versions up to 2.4.11.
Risk Assessment
An attacker can read sensitive files on the server, such as configuration files, potentially leading to data leakage.
Recommendation
Update the Restaurant Menu by MotoPress plugin to a version newer than 2.4.11 if a fix is available.
Other vulnerabilities in Restaurant Menu by MotoPress
See all- CVE-2026-57644High
The Restaurant Menu by MotoPress plugin version 2.4.10 and earlier contains a SQL injection vulnerability exploitable by contributors. An attacker with contributor privileges can inject malicious SQL queries into the database.
- CVE-2025-63078Medium
The Restaurant Menu by MotoPress plugin in versions 2.4.11 and earlier contains a vulnerability related to broken access control by subscribers. Users with the subscriber role can gain unauthorized access to restaurant menu management functions.
Original NVD description (English source)
Unauthenticated Local File Inclusion in Restaurant Menu by MotoPress <= 2.4.11 versions.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS