PT-2026-77120 · Jetmonsters · Restaurant Menu By Motopress
CVE-2026-73400
·
Published
2026-08-18
·
Updated
2026-08-27
CVSS v3.1
8.1
High
| Vector | AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Restaurant Menu by MotoPress versions prior to 2.4.12
Description
An unauthenticated Local File Inclusion (LFI) exists, which allows a remote attacker to read files from the server without requiring user interaction. Local File Inclusion is a vulnerability that occurs when an application includes a file without properly validating the input, potentially allowing access to sensitive files on the local system.
Recommendations
Update to a version newer than 2.4.11.
Fix
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Restaurant Menu By Motopress