CVE-2019-15819 - The nd-restaurant-reservations plugin before 1.5 for WordPress has no requirement for nd_rst_import_settings_php_function authentication

CRITICAL

The nd-restaurant-reservations plugin before 1.5 for WordPress has no requirement for nd_rst_import_settings_php_function authentication

Published Aug 30, 2019

9.8

CRITICAL

CVSS 3.0

EPSS 3.21%

The nd-restaurant-reservations plugin before 1.5 for WordPress has no requirement for nd_rst_import_settings_php_function authentication.

No remediation recorded yet.

Weaknesses (1)

CWE-306

Missing Authentication

Link	Providers	Tags
https://blog.nintechnet.com/privilege-escalation-vulnerability-in-wordpress-nd-restaurant-reservations-plugin/		x_refsource_MISCExploitThird Party Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-6736		Advisory
https://wordpress.org/plugins/nd-restaurant-reservations/#developers		x_refsource_MISCProductThird Party Advisory
https://wpvulndb.com/vulnerabilities/9501		x_refsource_MISCThird Party Advisory