Unknown RestroPress

2 known vulnerabilities in Unknown RestroPress, with patch priority, exploit likelihood and the news covering them.

Latest vulnerabilities

CVE-2026-85010 CVSS 5.3 medium The RestroPress WordPress plugin before 3.4.6 does not validate a client-supplied item add-on price on the server side when items are…
CVE-2026-85009 CVSS 6.5 medium The RestroPress WordPress plugin through 3.4.6 does not verify ownership in its payment-recovery flow before acting on a request-supplied…