CVE-2026-57644EXPLOITED

jetmonsters · restaurant menu by motopress

WordPress Restaurant Menu by MotoPress plugin <= 2.4.10 - SQL Injection vulnerability

Description

Contributor SQL Injection in Restaurant Menu by MotoPress <= 2.4.10 versions.

Affected Products

Vendor	Product	Versions
jetmonsters	restaurant menu by motopress	n/a

References

https://patchstack.com/database/wordpress/plugin/mp-restaurant-menu/vulnerability/wordpress-restaurant-menu-by-motopress-plugin-2-4-10-sql-injection-vulnerability?_s_id=cve(vdb-entry)

Related News (1 articles)

Tier C

VulDB58d ago

CVE-2026-57644 | jetmonsters Restaurant Menu by MotoPress Plugin up to 2.4.10 on WordPress sql injection

→ No new info (linked only)

CVSS 3.18.5 HIGH

VectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:L

CISA KEV❌ No

Actively exploited✅ Yes

CWECWE-89

PublishedJun 26, 2026

Last enriched58d agov2

Trending Score0

Source articles1

Independent1

Info Completeness8/14

Missing: epss, kev, exploit, patch, iocs, mitre_attack

Community Vote

0 upvotes0 downvotes

No votes yet

Related CVEs (5)

HIGHCVE-2026-73400EXPKEV

WordPress Restaurant Menu by MotoPress plugin <= 2.4.11 - Local File Inclusion vulnerability

Trending: 45

HIGHCVE-2026-28140

WordPress JetFormBuilder plugin <= 3.6.4.1 - Broken Access Control vulnerability

Trending: 5

CRITICALCVE-2026-13454EXP

MotoPress Appointment Booking <= 2.4.5 - Authenticated (Staff+) SQL Injection via 's' Parameter

MEDIUMCVE-2026-57347EXP

WordPress Hotel Booking Lite plugin <= 6.0.3 - Sensitive Data Exposure vulnerability

MEDIUMCVE-2025-63078

WordPress Restaurant Menu by MotoPress plugin <= 2.4.11 - Broken Access Control vulnerability

Pin to Dashboard

Verification

State: unverified

Confidence: 0%

Vulnerability Timeline

CVE Published

Jun 26, 2026

Discovered by ZDM

Jun 26, 2026

Updated: severity, activelyExploited

Jun 26, 2026

Actively Exploited

Jun 26, 2026

Version History

Last enriched 58d ago

v2Tier C58d ago

Updated severity to CRITICAL and noted that no exploit is available.

severityactivelyExploited

via VulDB

v158d ago

Initial creation