CVE-2023-0550

The Quick Restaurant Menu plugin for WordPress is vulnerable to Insecure Direct Object Reference in versions up to, and including, 2.0.2. This is due to the fact that during menu item deletion/modification, the plugin does not verify that the post ID provided to the AJAX action is indeed a menu item. This makes it possible for authenticated attackers, with subscriber-level access or higher, to modify or delete arbitrary posts.

• CWE-639

• https://plugins.trac.wordpress.org/browser/quick-restaurant-menu/tags/2.0.2/includes/admin/ajax-functions.phpPatch, Third Party Advisory
• https://plugins.trac.wordpress.org/changeset/2851871/quick-restaurant-menu/trunk?contextall=1&old=2788636&old_path=%2Fquick-restaurant-menu%2FtrunkPatch, Third Party Advisory
• https://www.wordfence.com/blog/2023/02/multiple-vulnerabilities-patched-in-quick-restaurant-menu-plugin/
• https://www.wordfence.com/threat-intel/vulnerabilities/id/faa4fba5-cd19-4b96-aa09-07ed6d52a107?source=cve
• https://plugins.trac.wordpress.org/browser/quick-restaurant-menu/tags/2.0.2/includes/admin/ajax-functions.phpPatch, Third Party Advisory
• https://plugins.trac.wordpress.org/changeset/2851871/quick-restaurant-menu/trunk?contextall=1&old=2788636&old_path=%2Fquick-restaurant-menu%2FtrunkPatch, Third Party Advisory
• https://www.wordfence.com/threat-intel/vulnerabilities/id/faa4fba5-cd19-4b96-aa09-07ed6d52a107Third Party Advisory

Published

Jan 27, 2023

Last Modified

Jun 17, 2026

Status

Modified

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-0544The WP Login Box WordPress plugin through 2.0.2 does not san…4.8
• CVE-2023-0545The Hostel WordPress plugin before 1.1.5.2 does not sanitise…4.8
• CVE-2023-0546The Contact Form Plugin WordPress plugin before 4.3.25 does …5.4
• CVE-2023-0547OCSP revocation status of recipient certificates was not che…6.5
• CVE-2023-0548The Namaste! LMS WordPress plugin before 2.5.9.4 does not sa…4.8
• CVE-2023-0549A vulnerability, which was classified as problematic, has be…5.4
• CVE-2023-0551The REST API TO MiniProgram WordPress plugin through 4.6.1 d…5.4
• CVE-2023-0552The Registration Forms WordPress plugin before 3.8.2.3 does …5.4
• CVE-2023-0553The Quick Restaurant Menu plugin for WordPress is vulnerable…4.4
• CVE-2023-0554The Quick Restaurant Menu plugin for WordPress is vulnerable…8.1
• CVE-2023-0555The Quick Restaurant Menu plugin for WordPress is vulnerable…8.1
• CVE-2023-0556The ContentStudio plugin for WordPress is vulnerable to auth…6.5