CVE-2023-5340

9.8 criticalEPSS 1.2%

Critical (9.8) in fivestarplugins five star restaurant menu. EPSS 1.2% chance of exploitation in the next 30 days.

The Five Star Restaurant Menu and Food Ordering WordPress plugin before 2.4.11 unserializes user input via an AJAX action available to unauthenticated users, allowing them to perform PHP Object Injection when a suitable gadget is present on the blog.

Severity

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 1.2% chance of exploitation in the next 30 days; higher than 69% of CVEs (scores of 2026-10-31)
CWE: CWE-74
Published: 2023-11-20
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

fivestarplugins:five_star_restaurant_menu

References

https://wpscan.com/vulnerability/91a5847a-62e7-4b98-a554-5eecb6a06e5b
https://wpscan.com/vulnerability/91a5847a-62e7-4b98-a554-5eecb6a06e5b

Check your stack JSON