Log in Start free

Rustaurius

Products

ProductCVEsExploitedLatest
Front End Users9–Oct 22, 2025
Ultimate WP Mail6–Sep 22, 2025
Five Star Restaurant Reservations4–Mar 25, 2026
Ultimate Reviews3–Jan 23, 2026
Order Tracking – WordPress Status Tracking Plugin2–Aug 31, 2023
Ultimate FAQ2–Sep 23, 2026
Five Star Restaurant Reservations – WordPress Booking Plugin2–Apr 30, 2026
Five Star Restaurant Menu1–Jun 26, 2026
Affiliate AI Lite1–Nov 21, 2025
Five Star Restaurant Menu and Food Ordering1–Jun 5, 2024
Five Star Business Profile and Schema1–Jul 2, 2026
Order Tracking1–Apr 8, 2026
Ultimate FAQ Accordion Plugin1–Apr 9, 2026

Exploited and recent CVEs

  • CVE-2026-94391 Medium 6.5 WordPress Ultimate FAQ plugin <= 2.4.14 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2026-27436 Critical 9.1 WordPress Five Star Business Profile and Schema plugin <= 2.3.19 - Arbitrary Code Execution vulnerability 0.7%
  • CVE-2026-54835 High 7.5 WordPress Five Star Restaurant Menu plugin <= 2.5.2 - Broken Access Control vulnerability 0.3%
  • CVE-2026-6498 Medium 5.3 Five Star Restaurant Reservations <= 2.7.16 - Unauthenticated Payment Bypass via PHP Type Juggling in 'payment_id' Parameter 0.2%
  • CVE-2026-4336 Medium 6.4 Ultimate FAQ Accordion Plugin <= 2.4.7 - Authenticated (Author+) Stored Cross-Site Scripting via FAQ Content 0.2%
  • CVE-2026-39602 Medium 5.3 WordPress Order Tracking plugin <= 3.4.3 - Broken Access Control vulnerability 0.2%
  • CVE-2026-25327 Medium 6.5 WordPress Five Star Restaurant Reservations plugin <= 2.7.9 - Broken Access Control vulnerability 0.2%
  • CVE-2026-24634 Medium 5.3 WordPress Ultimate Reviews plugin <= 3.2.16 - Insecure Direct Object References (IDOR) vulnerability 0.2%
  • CVE-2025-68044 High 8.6 WordPress Five Star Restaurant Reservations plugin <= 2.7.4 - Insecure Direct Object References (IDOR) vulnerability 0.3%
  • CVE-2025-68601 Medium 5.4 WordPress Five Star Restaurant Reservations plugin <= 2.7.8 - Cross Site Request Forgery (CSRF) vulnerability 0.1%
  • CVE-2025-11496 Medium 6.1 Five Star Restaurant Reservations – WordPress Booking Plugin <= 2.7.5 - Unauthenticated Stored Cross-Site Scripting 0.2%
  • CVE-2025-67590 Medium 4.3 WordPress Ultimate FAQ plugin <= 2.4.3 - Cross Site Request Forgery (CSRF) vulnerability 0.1%
  • CVE-2025-11799 Medium 6.4 Affiliate AI Lite <= 1.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting 0.2%
  • CVE-2025-62072 Medium 4.3 WordPress Front End Users plugin <= 3.2.33 - Broken Access Control vulnerability 0.2%
  • CVE-2025-53454 Medium 6.5 WordPress Ultimate WP Mail Plugin <= 1.3.8 - Cross Site Scripting (XSS) Vulnerability 0.3%
  • CVE-2025-58235 Medium 6.5 WordPress Front End Users plugin <= 3.2.35 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2025-6993 High 7.5 Ultimate WP Mail 1.0.17 - 1.3.6 - Missing Authorization to Authenticated (Contributor+) Privilege Escalation via get_email_log_details Function 0.5%
  • CVE-2025-49266 High 7.1 WordPress Ultimate Reviews plugin <= 3.2.14 - Reflected Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2025-49288 High 8.8 WordPress Ultimate WP Mail plugin <= 1.3.5 - Account Takeover via Email Log Leak Vulnerability 0.6%
  • CVE-2025-47580 Medium 5.4 WordPress Front End Users plugin <= 3.2.35 - Broken Access Control vulnerability 0.3%
  • CVE-2025-47490 High 8.5 WordPress Ultimate WP Mail plugin <= 1.3.4 - SQL Injection Vulnerability 0.3%
  • CVE-2025-47466 Medium 5.4 WordPress Ultimate WP Mail plugin <= 1.3.4 - Cross Site Request Forgery (CSRF) Vulnerability 0.2%
  • CVE-2025-32694 Medium 4.7 WordPress Ultimate WP Mail plugin <= 1.3.10 - Open Redirection vulnerability 0.4%
  • CVE-2024-12410 Medium 4.9 Front End Users <= 3.2.32 - Authenticated (Admin+) SQL injection 0.5%
  • CVE-2025-2005 Critical 9.8 Front-End-Only-Users <= 3.2.32 - Unauthenticated Arbitrary File Upload 21.8%
  • CVE-2025-30861 Medium 4.9 WordPress Five Star Restaurant Reservations plugin <= 2.6.29 - Broken Access Control vulnerability 0.6%
  • CVE-2025-26877 Medium 6.5 WordPress Front End Users Plugin <= 3.2.30 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2024-13563 Medium 6.4 Front End Users <= 3.2.30 - Authenticated (Contributor+) Stored Cross-Site Scripting via forgot-password Shortcode 0.3%
  • CVE-2024-7607 High 8.8 Front End Users <= 3.2.28 - Authenticated (Contributor+) Time-Based SQL Injection 0.5%
  • CVE-2024-7606 Medium 6.4 Front End Users <= 3.2.28 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode 0.3%