CVE-2026-42670

CVE-2026-42670: WordPress Five Star Restaurant Reservations plugin <= 2.7.14 - Payment Bypass vulnerability

Vendor Etoile Web Design Incorporated

Product Five Star Restaurant Reservations

Weakness CWE-862 · Missing authorization

Published June 2, 2026

Last update June 2, 2026

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

Description

Missing Authorization vulnerability in Etoile Web Design Incorporated Five Star Restaurant Reservations allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Five Star Restaurant Reservations: from n/a through 2.7.14.

Key dates

Disclosure timeline

June 2, 2026 CVE published

June 2, 2026 Record updated