SQL Injection Vulnerability in Restaurant Menu by MotoPress
CVE-2026-57644

8.5HIGH

Key Information:

Vendor

WordPress
Status
Restaurant Menu By Motopress
Vendor
CVE Published:
26 June 2026

What is CVE-2026-57644?

An SQL injection vulnerability has been identified in the Restaurant Menu plugin developed by MotoPress for WordPress. This flaw, present in versions 2.4.10 and earlier, allows attackers to execute arbitrary SQL queries, potentially compromising the database's integrity and exposing sensitive information. It is crucial for users of the affected version to update to the latest security patch to mitigate risks associated with this vulnerability.

Affected Version(s)

Restaurant Menu by MotoPress <= 2.4.10

References

https://patchstack.com/database/wordpress/plugin/mp-resta...
vdb-entry

CVSS V3.1

Score:
8.5
Severity:
HIGH
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Baikuya | Patchstack Bug Bounty Program
.