Medium severity4.3NVD Advisory· Published Feb 2, 2026· Updated Apr 15, 2026

CVE-2026-0658

Description

The Five Star Restaurant Reservations WordPress plugin before 2.7.9 does not have CSRF checks in some bulk actions, which could allow attackers to make logged in admins perform unwanted actions, such as deleting bookings via CSRF attacks.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

WordPress/Restaurant Reservationsllm-fuzzy
Range: <2.7.9
Package: https://wordpress.org/plugins/restaurant-reservations

Patches

Vulnerability mechanics

References

wpscan.com/vulnerability/6e39090e-a4b2-4c16-806f-e2b1c456fb00/nvd

News mentions

No linked articles in our index yet.

cvss	0.280
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000