CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
What the vulnerability does
The RestroPress – Online Food Ordering System plugin for WordPress is vulnerable to Authentication Bypass in versions 3.0.0 to 3.1.9.2. This is due to the plugin exposing user private tokens and API data via the /wp-json/wp/v2/users REST API endpoint. This makes it possible for unauthenticated attackers to forge JWT tokens for other users, including administrators, and authenticate as them.
Explanation of Vulnerability in Simple Terms
RestroPress versions 3.0.0 through 3.1.9.2 contain an information exposure vulnerability that allows unauthenticated attackers to read sensitive data, modify site content, and disrupt service over the network. No user interaction or special privileges are required. The vulnerability affects the core functionality of the food ordering system.
What an attacker can do
Read sensitive data, modify site content, and disrupt the ordering system without authentication.
Potential impact on your site
Attackers can steal customer data, alter orders, and take the ordering system offline without warning.
Conditions required to exploit
Network access only; no authentication, special privileges, or user interaction required.
Key dates
External resources
