Known vulnerabilities in Five Star Restaurant Menu and Food Ordering

Restaurant menu and food ordering system that is easy to set up and integrates with any theme. Includes restaurant menu blocks and patterns.

5Reported vulnerabilities

9.8Highest CVSS score

2.5.4Latest version

5,000+Active installs

What to do now

Update Five Star Restaurant Menu and Food Ordering to 2.5.3 or later. 5 of these have a fixed version available. Updating resolves them.

Plugin last updated: July 30, 2026 / Tested up to WordPress: 7.0.4 / View on wordpress.org

Reported vulnerabilities

Ordered by how urgently they need attention — whether a vulnerability is actually being exploited, and how likely exploitation is, rather than CVSS severity alone.

CVE	Severity	Exploit probability next 30 days	Affected versions	Fixed in	Published
CVE-2020-29045	Critical 9.8	30.8%	2.2.0 and earlier	`2.2.1`	March 11, 2021
CVE-2024-29089	Medium 6.4	0.3%	2.4.14 and earlier	`2.4.15`	March 15, 2024
CVE-2026-54835	Medium 5.3	0.3%	2.5.2 and earlier	`2.5.3`	June 18, 2026
CVE-2024-5459	Medium 4.3	0.4%	Before 2.4.17	`2.4.17`	June 5, 2024
CVE-2023-37985	Medium 4.3	0.3%	Before 2.4.7	`2.4.7`	July 17, 2023

Sources: vulnerability records from NVD, exploitation from CISA KEV, exploit probability from EPSS. Affected versions come from CPE ranges or from the reporting CNA.