WordPress plugin
RestroPress – Online Food Ordering System security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 13 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical1
- High1
- Medium11
- Low0
All RestroPress – Online Food Ordering System vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| Critical9.8 | 3.2.1 - Unauthenticated Information Exposure to Authentication Bypass via Forged JWT 3.0.0 – 3.2.1Update to 3.2.2 | CVE-2025-9209 | |
| High8.8 | Cross-Site Request Forgery to Cart Manipulation ≤2.8.2Update to 2.8.3 | — |
- Critical9.83.2.1 - Unauthenticated Information Exposure to Authentication Bypass via Forged JWT
3.0.0 – 3.2.1Update to 3.2.2
- High8.8Cross-Site Request Forgery to Cart Manipulation
≤2.8.2Update to 2.8.3
RestroPress – Online Food Ordering System: common questions
Does RestroPress – Online Food Ordering System have known vulnerabilities?
Yes. VulnCrest Radar lists 13 known vulnerabilities in RestroPress – Online Food Ordering System: 1 critical, 1 high, 11 medium. None are known to affect version null.
How do I check which version of RestroPress – Online Food Ordering System I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent RestroPress – Online Food Ordering System vulnerability?
CVE-2026-125784, published Nov 11, 2026: RestroPress – Online Food Ordering System <= 3.4.11 - Cross-Site Request Forgery. Severity: Medium (CVSS 4.3).
Is any RestroPress – Online Food Ordering System vulnerability listed in CISA KEV?
No. None of the known RestroPress – Online Food Ordering System vulnerabilities is currently listed in the CISA KEV catalog.