CVE-2020-29045: Fivestarplugins Five Star Restaurant Menu

Critical severity, CVSS 9.8. EPSS: 30.8% chance of exploitation in the next 30 days.

The food-and-drink-menu plugin through 2.2.0 for WordPress allows remote attackers to execute arbitrary code because of an unserialize operation on the fdm_cart cookie in load_cart_from_cookie in includes/class-cart-manager.php.

Affected products

• Fivestarplugins Five Star Restaurant Menu: up to and including 2.2.0

Published 2021-03-11. Last modified 2026-06-17.