Easy PDF Restaurant Menu Upload
by WordPress
Source repositories
CVEs (3)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2019-15842 | Med | 0.40 | 6.1 | 0.01 | Aug 30, 2019 | The easy-pdf-restaurant-menu-upload plugin before 1.1.2 for WordPress has XSS. | ||
| CVE-2025-6673 | Med | 0.35 | 6.4 | 0.00 | Jul 4, 2025 | The Easy restaurant menu manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's nsc_eprm_menu_link shortcode in versions up to, and including 2.0.1, due to insufficient input sanitization and output escaping on user supplied attributes. This… | ||
| CVE-2025-8491 | Med | 0.21 | 4.3 | 0.00 | Aug 13, 2025 | The Easy restaurant menu manager plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.0.2. This is due to missing or incorrect nonce validation on the nsc_eprm_save_menu() function. This makes it possible for unauthenticated… |
- risk 0.40cvss 6.1epss 0.01
The easy-pdf-restaurant-menu-upload plugin before 1.1.2 for WordPress has XSS.
- risk 0.35cvss 6.4epss 0.00
The Easy restaurant menu manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's nsc_eprm_menu_link shortcode in versions up to, and including 2.0.1, due to insufficient input sanitization and output escaping on user supplied attributes. This…
- risk 0.21cvss 4.3epss 0.00
The Easy restaurant menu manager plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.0.2. This is due to missing or incorrect nonce validation on the nsc_eprm_save_menu() function. This makes it possible for unauthenticated…