CVE-2025-54038: jetmonsters Restaurant Menu by MotoPress, CSRF

Описание

Оригинално описание

Cross-Site Request Forgery (CSRF) vulnerability in jetmonsters Restaurant Menu by MotoPress mp-restaurant-menu allows Cross Site Request Forgery.This issue affects Restaurant Menu by MotoPress: from n/a through <= 2.4.6.

Засегнати продукти

• jetmonsters Restaurant Menu by MotoPress: до 2.4.6

Вид слабост

• CWE-352 CSRF

История

Други уязвимости в jetmonsters Restaurant Menu by MotoPress

• 8.1CVE-2026-73400
• 8.5CVE-2026-57644
• 4.3CVE-2025-63078
• 6.5CVE-2025-49914
• 8.8CVE-2025-30846

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2025-54038
• https://nvd.nist.gov/vuln/detail/CVE-2025-54038
• https://patchstack.com/database/Wordpress/Plugin/mp-restaurant-menu/vulnerability/wordpress-restaurant-menu-by-motopress-plugin-2-4-6-cross-site-request-forgery-csrf-vulnerability?_s_id=cve