CVE-2023-5340

The Five Star Restaurant Menu and Food Ordering WordPress plugin before 2.4.11 unserializes user input via an AJAX action available to unauthenticated users, allowing them to perform PHP Object Injection when a suitable gadget is present on the blog.

CVSS v3.1

9.8 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

1.24% chance of exploitation in the next 30 days, 67th percentile

Published

2023-11-20

Updated

2024-11-21

Proof-of-concept exploits (1)

• https://wpscan.com/vulnerability/91a5847a-62e7-4b98-a554-5eecb6a06e5b

References

• CVE Record
• NVD entry

Related

• CVE-2023-5329
• CVE-2023-5343
• CVE-2023-5328
• CVE-2023-5344
• CVE-2023-5327
• CVE-2023-5345