WordPress ReDi Restaurant Reservation plugin <= 23.0211 - Broken Access Control vulnerability

CVE-2023-36510

What is CVE-2023-36510?

The ReDi Restaurant Reservation plugin is affected by a missing authorization vulnerability that arises from improperly configured access control security levels. This flaw allows unauthorized users to potentially exploit the system, gaining access to features and data that should be restricted. The affected versions, ranging from n/a up to 23.0211, may expose users to significant security risks if not addressed promptly. It is crucial for users of this plugin to review their configurations and implement necessary security measures.

References