CVE-2022-2696

The Restaurant Menu – Food Ordering System – Table Reservation plugin for WordPress is vulnerable to authorization bypass via several AJAX actions in versions up to, and including 2.3.0 due to missing capability checks and missing nonce validation. This makes it possible for authenticated attackers with minimal permissions to perform a wide variety of actions such as modifying the plugin's settings and modifying the ordering system preferences.

• CWE-862

• https://plugins.trac.wordpress.org/browser/menu-ordering-reservations/trunk/includes/admin/class-glf-admin-screens.php?rev=2664283Third Party Advisory
• https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=2793398%40menu-ordering-reservations&new=2793398%40menu-ordering-reservations&sfp_email=&sfph_mail=Patch, Third Party Advisory
• https://www.wordfence.com/threat-intel/vulnerabilities/id/01486af8-b378-4663-a9c5-167b8580db94?source=cve
• https://www.wordfence.com/vulnerability-advisories-continued/#CVE-2022-2696Third Party Advisory
• https://plugins.trac.wordpress.org/browser/menu-ordering-reservations/trunk/includes/admin/class-glf-admin-screens.php?rev=2664283Third Party Advisory
• https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=2793398%40menu-ordering-reservations&new=2793398%40menu-ordering-reservations&sfp_email=&sfph_mail=Patch, Third Party Advisory
• https://www.wordfence.com/vulnerability-advisories-continued/#CVE-2022-2696Third Party Advisory

Published

Nov 3, 2022

Last Modified

Jun 17, 2026

Status

Modified

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-26950Archer 6.x through 6.9 P2 (6.9.0.2) is affected by an open r…6.1
• CVE-2022-26951Archer 6.x through 6.10 (6.10.0.0) contains a reflected XSS …6.1
• CVE-2022-26952Digi Passport Firmware through 1.5.1,1 is affected by a buff…7.5
• CVE-2022-26953Digi Passport Firmware through 1.5.1,1 is affected by a buff…7.5
• CVE-2022-26954Multiple open redirect vulnerabilities in NopCommerce 4.10 t…6.1
• CVE-2022-26959There are two full (read/write) Blind/Time-based SQL injecti…9.8
• CVE-2022-26960connector.minimal.php in std42 elFinder through 2.1.60 is af…9.1
• CVE-2022-26964Weak password derivation for export in Devolutions Remote De…7.5
• CVE-2022-26965In Pluck 4.7.16, an admin user can use the theme upload func…7.2
• CVE-2022-26966An issue was discovered in the Linux kernel before 5.16.12. …5.5
• CVE-2022-26967GPAC 2.0 allows a heap-based buffer overflow in gf_base64_en…7.8
• CVE-2022-26969In Directus before 9.7.0, the default settings of CORS_ORIGI…9.8