Cross-Site Request Forgery Vulnerability in Rustaurius Five Star Restaurant Reservations
CVE-2025-68601

Currently unrated

Key Information:

Vendor

WordPress

Vendor
CVE Published:
24 December 2025

What is CVE-2025-68601?

A Cross-Site Request Forgery (CSRF) vulnerability is present in the Rustaurius Five Star Restaurant Reservations plugin for WordPress. This security issue could allow attackers to perform unwanted actions on behalf of an authenticated user without their consent. The vulnerability affects versions up to and including 2.7.7, potentially compromising user accounts and inviting further malicious activities. It is crucial for users to update their plugins to secure their applications against CSRF attacks.

Affected Version(s)

Five Star Restaurant Reservations <= n/a

References

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

benzdeus | Patchstack Bug Bounty Program
.
CVE-2025-68601 : Cross-Site Request Forgery Vulnerability in Rustaurius Five Star Restaurant Reservations