PLUGIN SECURITY
Is Menu Ordering Reservations safe?
Create a restaurant menu and start taking food orders online, with no commissions or costs. Table reservations are also available for free.
What this plugin does
- Slug:
menu-ordering-reservations - Author: Gloriafood
- 7000+ active installs
- 88/100 rating (54 reviews on wordpress.org)
- 350239 all-time downloads
- On WordPress.org since 2018-02-28
food menufood orderfood orderingrestaurant menurestaurant reservation
Maintenance status
- Latest known version: 2.4.4
- Last updated: 2025-04-14 10:28am GMT
- Tested up to WordPress: 6.6.7
- Requires PHP: 5.5.0+
- Max supported PHP (analyzed): 8.4
Known vulnerabilities
7 known CVEs on file for Menu Ordering Reservations. Reported between 2022 and 2024.
| CVE | Vulnerability | Type | Severity | Affected | Fixed in | Published | Status |
|---|---|---|---|---|---|---|---|
| CVE-2024-9653 | Restaurant Menu – Food Ordering System – Table Reservation [menu-ordering-reservations] < 2.4.3 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | Medium 6.1 | < 2.4.3 | 2.4.3 | 2024-11-19 | ✓ fixed in latest |
| CVE-2024-1399 | Restaurant Menu – Food Ordering System – Table Reservation [menu-ordering-reservations] < 2.4.1 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | Medium 6.4 | < 2.4.1 | 2.4.1 | 2024-06-14 | ✓ fixed in latest |
| CVE-2024-32579 | Restaurant Menu – Food Ordering System – Table Reservation [menu-ordering-reservations] < 2.4.2 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | Medium 6.5 | < 2.4.2 | 2.4.2 | 2024-04-16 | ✓ fixed in latest |
| CVE-2023-32516 | Restaurant Menu – Food Ordering System – Table Reservation [menu-ordering-reservations] < 2.3.7 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | High 7.1 | < 2.3.7 | 2.3.7 | 2023-05-09 | ✓ fixed in latest |
| — | Restaurant Menu – Food Ordering System – Table Reservation [menu-ordering-reservations] < 2.3.6 | — | Unknown | < 2.3.6 | 2.3.6 | 2023-01-05 | ✓ fixed in latest |
| CVE-2022-4657 | Restaurant Menu – Food Ordering System – Table Reservation [menu-ordering-reservations] < 2.3.6 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | Medium 5.4 | < 2.3.6 | 2.3.6 | 2023-01-04 | ✓ fixed in latest |
| CVE-2022-2696 | Restaurant Menu – Food Ordering System – Table Reservation [menu-ordering-reservations] < 2.3.2 | Missing Authorization | Medium 6.5 | < 2.3.2 | 2.3.2 | 2022-10-31 | ✓ fixed in latest |
| CVE-2022-3776 | Restaurant Menu – Food Ordering System – Table Reservation [menu-ordering-reservations] < 2.3.2 | Cross-Site Request Forgery (CSRF) | High 8.8 | < 2.3.2 | 2.3.2 | 2022-10-31 | ✓ fixed in latest |
+ 2 more known vulnerabilities
| CVE | Vulnerability | Type | Severity | Affected | Fixed in | Published | Status |
|---|---|---|---|---|---|---|---|
| CVE-2022-4657 | Restaurant Menu < 2.3.6 - Contributor+ Stored XSS via Shortcode | — | Unknown | < 2.3.6 | 2.3.6 | — | ✓ fixed in latest |
| CVE-2023-32516 | Restaurant Menu < 2.3.7 - Reflected XSS | — | Unknown | < 2.3.7 | 2.3.7 | — | ✓ fixed in latest |
How to fix it
Keep Menu Ordering Reservations updated — 2.4.4 is the latest version on wordpress.org, and each CVE above lists the exact release that fixed it ("Fixed in").
This is the plugin's full known vulnerability history, not a scan of any specific installation — run a free scan of your own site to check your exact installed version.
Safer / more established alternatives
- Orderable – Restaurant & Food Ordering System — 5000+ active installs — 92/100 (40) — max PHP 8.4
- WPCafe – Restaurant Menu, Online Food Ordering & Table Booking System — 5000+ active installs — 92/100 (108) — max PHP <8.0
- Five Star Restaurant Menu and Food Ordering — 5000+ active installs — 92/100 (107) — max PHP <8.0
- Food Menu – Restaurant Menu & Online Ordering for WooCommerce — 3000+ active installs — 100/100 (23)
- Restaurant Menu and Food Ordering — 2000+ active installs — 90/100 (15)
Check your own WordPress site
Run a free passive scan now, or create a free account and install the WP Clinic plugin for a deep scan of your whole hosting account and AI-assisted repair.