Known vulnerabilities in Unknown RestroPress
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2026-85010 | The RestroPress WordPress plugin before 3.4.6 does not validate a client-supplied item add-on price on the server side… | 5.3 Medium | Sep 21, 2026 |
| CVE-2026-85009 | The RestroPress WordPress plugin through 3.4.6 does not verify ownership in its payment-recovery flow before acting… | 6.5 Medium | Sep 18, 2026 |