WordPress All In One SEO Pack plugin versions 4.2.9 and below suffer from multiple persistent cross site scripting vulnerabilities.
74a6135d643e33e4d021ee5ec58f0ee2bd51c430b63b1e5f75fa0e95dc108a92
On January 16, 2023, the Wordfence Threat Intelligence team responsibly disclosed several vulnerabilities in Quick Restaurant Menu, a WordPress plugin that allows users to set up restaurant menus on their sites. This plugin is vulnerable to missing authorization, insecure direct object reference, cross site request forgery as well as cross site scripting in versions up to, and including, 2.0.2.
e3ba7e7e5a2df6cde42d9ee75f8bec79e5251c694adb11dfae0969e813acffdb