CVE-2022-3776

The Restaurant Menu – Food Ordering System – Table Reservation plugin before version 2.3.2 contains a cross-site request forgery vulnerability stemming from insufficient nonce verification in multiple AJAX handlers including forms_action, set_option, and chosen_options. An unauthenticated attacker could exploit this flaw to carry out administrative tasks such as altering forms by deceiving a site administrator into clicking a malicious link or visiting a specially crafted page. The vulnerability permits unauthorized modification of plugin settings and functionality through forged requests.

Based on public CVE data (MITRE/NVD).