PLUGIN SECURITY
Is Food And Drink Menu safe?
Restaurant menu and food ordering system that is easy to set up and integrates with any theme. Includes restaurant menu blocks and patterns.
What this plugin does
- Slug:
food-and-drink-menu - Author: Rustaurius
- 5000+ active installs
- 92/100 rating (107 reviews on wordpress.org)
- 434116 all-time downloads
- On WordPress.org since 2013-12-06
Food Deliveryfood menufood orderingrestaurantrestaurant menu
Maintenance status
- Latest known version: 2.5.4
- Last updated: 2026-08-20 2:47pm GMT
- Tested up to WordPress: 7.1
- Requires PHP: 8.0+
- Max supported PHP (analyzed): <8.0
Known vulnerabilities
6 known CVEs on file for Food And Drink Menu. Reported between 2021 and 2024.
| CVE | Vulnerability | Type | Severity | Affected | Fixed in | Published | Status |
|---|---|---|---|---|---|---|---|
| CVE-2024-5459 | Five Star Restaurant Menu and Food Ordering [food-and-drink-menu] < 2.4.17 | Missing Authorization | Medium 4.3 | < 2.4.17 | 2.4.17 | 2024-06-04 | ✓ fixed in latest |
| CVE-2026-54835 | Five Star Restaurant Menu and Food Ordering [food-and-drink-menu] < 2.5.3 | Missing Authorization | High 7.5 | < 2.5.3 | 2.5.3 | 2024-06-04 | ✓ fixed in latest |
| CVE-2024-29089 | Five Star Restaurant Menu and Food Ordering [food-and-drink-menu] < 2.4.15 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | Medium 6.5 | < 2.4.15 | 2.4.15 | 2024-03-15 | ✓ fixed in latest |
| CVE-2023-5340 | Five Star Restaurant Menu and Food Ordering [food-and-drink-menu] < 2.4.11 | Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') | Critical 9.8 | < 2.4.11 | 2.4.11 | 2023-10-27 | ✓ fixed in latest |
| CVE-2023-37985 | Five Star Restaurant Menu and Food Ordering [food-and-drink-menu] < 2.4.7 | Cross-Site Request Forgery (CSRF) | Medium 4.3 | < 2.4.7 | 2.4.7 | 2023-07-17 | ✓ fixed in latest |
| CVE-2020-29045 | Five Star Restaurant Menu and Food Ordering [food-and-drink-menu] < 2.2.1 | Deserialization of Untrusted Data | Critical 9.8 | < 2.2.1 | 2.2.1 | 2021-01-11 | ✓ fixed in latest |
How to fix it
Keep Food And Drink Menu updated — 2.5.4 is the latest version on wordpress.org, and each CVE above lists the exact release that fixed it ("Fixed in").
This is the plugin's full known vulnerability history, not a scan of any specific installation — run a free scan of your own site to check your exact installed version.
Safer / more established alternatives
- Restaurant Menu – Food Ordering System – Table Reservation — 7000+ active installs — 88/100 (54) — max PHP 8.4
- Orderable – Restaurant & Food Ordering System — 5000+ active installs — 92/100 (40) — max PHP 8.4
- WPCafe – Restaurant Menu, Online Food Ordering & Table Booking System — 5000+ active installs — 92/100 (108) — max PHP <8.0
- Food Menu – Restaurant Menu & Online Ordering for WooCommerce — 3000+ active installs — 100/100 (23)
- Restaurant Menu and Food Ordering — 2000+ active installs — 90/100 (15)
Check your own WordPress site
Run a free passive scan now, or create a free account and install the WP Clinic plugin for a deep scan of your whole hosting account and AI-assisted repair.