Food Menu WooCommerce Plugin Missing Authorization Vulnerability on Settings Update

A vulnerability exists in the Food Menu – Restaurant Menu & Online Ordering for WooCommerce plugin for WordPress, in all versions through 5.1.4. The issue arises from a missing capability check in the response() function, allowing authenticated attackers with Subscriber-level access and above to unauthorizedly modify the plugin's settings.

Impact

Exploitation of this vulnerability allows for unauthorized modification of the plugin's settings by authenticated users with Subscriber-level access or higher.

Remediation

Users are advised to update the plugin to version 5.2.0 or a newer patched version.