CVE-2025-63078 Subscriber Broken Access Control in Restaurant Menu by MotoPress <= 2.4.11 versions

Description

Subscriber Broken Access Control in Restaurant Menu by MotoPress <= 2.4.11 versions.

Affected products and versions

Product	Affected versions	Fixed in
Restaurant Menu by MotoPress 2.4	earliest → 2.4.11	No fix stated

Other CVEs of Restaurant Menu by MotoPress

The 6 CVEs of Restaurant Menu by MotoPress →

CVE-2026-73400 Unauthenticated Local File Inclusion in Restaurant Menu by MotoPress <= 2.4.11 versions 8.1 High CVE-2026-57644 Contributor SQL Injection in Restaurant Menu by MotoPress <= 2.4.10 versions 8.5 High CVE-2025-49914 Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in jetmonsters Restaurant… 6.5 Medium CVE-2025-54038 Cross-Site Request Forgery (CSRF) vulnerability in jetmonsters Restaurant Menu by MotoPress mp-restaurant-menu allows… 5.4 Medium