WooCommerce Food - Restaurant Menu & Food Ordering Plugin Shortcode Execution Vulnerability

A vulnerability allowing arbitrary shortcode execution has been identified in the WooCommerce Food - Restaurant Menu & Food Ordering plugin for WordPress, affecting all versions through 3.3.2. The issue arises because the plugin does not properly validate user input before executing shortcodes, enabling unauthenticated attackers to execute arbitrary shortcodes on the site.

Impact

Exploitation of this vulnerability allows for arbitrary shortcode execution, which could be used to execute potentially harmful actions or code on the WordPress site.

Remediation

Users are advised to update the WooCommerce Food - Restaurant Menu & Food Ordering plugin to version 3.3.3 or a newer patched version.