critical9.8
CVE-2020-29045
The food-and-drink-menu plugin through 2.2.0 for WordPress allows remote attackers to execute arbitrary code because of an unserialize operation on the fdm_car…
Impact
The food-and-drink-menu plugin through 2.2.0 for WordPress allows remote attackers to execute arbitrary code because of an unserialize operation on the fdm_cart cookie in load_cart_from_cookie in includes/class-cart-manager.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Fivestarplugins | Five Star Restaurant Menu | through 2.2.0 |