Tlp Food Menu Vulnerabilities

The Food Menu – Restaurant Menu & Online Ordering for WooCommerce plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in versions up to 6.0.2. This makes it possible for unauthenticated attackers to perform an unauthorized action.

CVSS:

5.3

Affected:

up to 6.0.2

Fixed in:

6.0.2

Disclosed:

Aug 14, 2026

CVE-2026-13328 on NVD →

The Food Menu – Restaurant Menu & Online Ordering for WooCommerce plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the response() function in all versions up to, and including, 5.1.4. This makes it possible for authenticated attackers, with Subscriber-level access and above...

CVSS:

4.3

Affected:

up to 5.1.4

Fixed in:

5.2.0

Disclosed:

Jan 30, 2025

CVE-2024-13415 on NVD →