Cross-Site Request Forgery in Easy Restaurant Menu Manager Plugin for WordPress

CVE-2025-8491

What is CVE-2025-8491?

The Easy Restaurant Menu Manager plugin for WordPress is susceptible to Cross-Site Request Forgery due to inadequate nonce validation in its existing functionality. This vulnerability allows unauthenticated attackers to craft malicious requests that could upload menu files, provided they deceive an admin into executing the harmful action by clicking on a compromised link. Sites using versions up to and including 2.0.2 are particularly at risk, making it essential to apply proper security measures to mitigate potential exploitation.

References