Cross-Site Request Forgery Flaw in Restaurant Menu by MotoPress
CVE-2025-54038

5.4MEDIUM

Key Information:

Vendor

WordPress
Status
Restaurant Menu By Motopress
Vendor
CVE Published:
16 July 2025

What is CVE-2025-54038?

A Cross-Site Request Forgery vulnerability exists in the Restaurant Menu plugin by MotoPress, allowing malicious actors to perform unauthorized actions on behalf of users. This flaw affects versions up to 2.4.6, potentially compromising the security of users and their data. It is crucial for administrators to apply security best practices and ensure their plugin is updated to mitigate this risk.

Affected Version(s)

Restaurant Menu by MotoPress <= 2.4.6

References

https://patchstack.com/database/wordpress/plugin/mp-resta...
vdb-entry

CVSS V3.1

Score:
5.4
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Nguyen Xuan Chien (Patchstack Alliance)
.
CVE-2025-54038 : Cross-Site Request Forgery Flaw in Restaurant Menu by MotoPress