Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

rustaurius — Vulnerabilities & Security Advisories 34

Browse all 34 CVE security advisories affecting rustaurius. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Rustaurius operates as a specialized software component, primarily utilized in embedded systems and IoT devices to provide robust memory safety and concurrency features. Its core utility lies in enabling developers to build high-performance applications while mitigating common low-level memory errors. Historically, vulnerabilities associated with this technology have frequently involved remote code execution and privilege escalation, often stemming from improper input validation or flawed cryptographic implementations. While the component itself is secure by design, integration errors have led to approximately 31 recorded CVEs, highlighting risks in custom implementations rather than the base library. Notable incidents typically involve attackers exploiting weak authentication mechanisms or unpatched dependencies within the surrounding ecosystem. Security audits emphasize the need for rigorous code review and strict adherence to secure coding standards to prevent these historically common exploitation vectors from compromising device integrity.

CVE ID Title CVSS Severity Published
CVE-2026-94391 WordPress Ultimate FAQ plugin <= 2.4.14 - Cross Site Scripting (XSS) vulnerability — Ultimate FAQ CWE-79 6.5 Medium 2026-09-23
CVE-2026-27436 WordPress Five Star Business Profile and Schema plugin <= 2.3.19 - Arbitrary Code Execution vulnerability — Five Star Business Profile and Schema CWE-94 9.1 Critical 2026-07-02
CVE-2026-54835 WordPress Five Star Restaurant Menu plugin <= 2.5.2 - Broken Access Control vulnerability — Five Star Restaurant Menu CWE-862 7.5 High 2026-06-26
CVE-2026-6498 Five Star Restaurant Reservations <= 2.7.16 - Unauthenticated Payment Bypass via PHP Type Juggling in 'payment_id' Parameter — Five Star Restaurant Reservations – WordPress Booking Plugin CWE-345 5.3 Medium 2026-04-30
CVE-2026-4336 Ultimate FAQ Accordion Plugin <= 2.4.7 - Authenticated (Author+) Stored Cross-Site Scripting via FAQ Content — Ultimate FAQ Accordion Plugin CWE-79 6.4 Medium 2026-04-09
CVE-2026-39602 WordPress Order Tracking plugin <= 3.4.3 - Broken Access Control vulnerability — Order Tracking CWE-862 5.3 Medium 2026-04-08
CVE-2026-25327 WordPress Five Star Restaurant Reservations plugin <= 2.7.9 - Broken Access Control vulnerability — Five Star Restaurant Reservations CWE-862 6.5 Medium 2026-03-25
CVE-2026-24634 WordPress Ultimate Reviews plugin <= 3.2.16 - Insecure Direct Object References (IDOR) vulnerability — Ultimate Reviews CWE-639 5.3 Medium 2026-01-23
CVE-2025-68044 WordPress Five Star Restaurant Reservations plugin <= 2.7.4 - Insecure Direct Object References (IDOR) vulnerability — Five Star Restaurant Reservations CWE-639 8.6 High 2026-01-05
CVE-2025-68601 WordPress Five Star Restaurant Reservations plugin <= 2.7.8 - Cross Site Request Forgery (CSRF) vulnerability — Five Star Restaurant Reservations CWE-352 5.4 Medium 2025-12-24
CVE-2025-11496 Five Star Restaurant Reservations – WordPress Booking Plugin <= 2.7.5 - Unauthenticated Stored Cross-Site Scripting — Five Star Restaurant Reservations – WordPress Booking Plugin CWE-79 6.1 Medium 2025-12-21
CVE-2025-67590 WordPress Ultimate FAQ plugin <= 2.4.3 - Cross Site Request Forgery (CSRF) vulnerability — Ultimate FAQ CWE-352 4.3 Medium 2025-12-09
CVE-2025-11799 Affiliate AI Lite <= 1.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting — Affiliate AI Lite CWE-79 6.4 Medium 2025-11-21
CVE-2025-62072 WordPress Front End Users plugin <= 3.2.33 - Broken Access Control vulnerability — Front End Users CWE-862 4.3 Medium 2025-10-22
CVE-2025-53454 WordPress Ultimate WP Mail Plugin <= 1.3.8 - Cross Site Scripting (XSS) Vulnerability — Ultimate WP Mail CWE-79 6.5 Medium 2025-09-22
CVE-2025-58235 WordPress Front End Users plugin <= 3.2.35 - Cross Site Scripting (XSS) vulnerability — Front End Users CWE-79 6.5 Medium 2025-09-22
CVE-2025-6993 Ultimate WP Mail 1.0.17 - 1.3.6 - Missing Authorization to Authenticated (Contributor+) Privilege Escalation via get_email_log_details Function — Ultimate WP Mail CWE-862 7.5 High 2025-07-16
CVE-2025-49266 WordPress Ultimate Reviews plugin <= 3.2.14 - Reflected Cross Site Scripting (XSS) vulnerability — Ultimate Reviews CWE-79 7.1 High 2025-06-17
CVE-2025-49288 WordPress Ultimate WP Mail plugin <= 1.3.5 - Account Takeover via Email Log Leak Vulnerability — Ultimate WP Mail CWE-862 8.8 High 2025-06-06
CVE-2025-47580 WordPress Front End Users plugin <= 3.2.35 - Broken Access Control vulnerability — Front End Users CWE-862 5.4 Medium 2025-05-15
CVE-2025-47490 WordPress Ultimate WP Mail plugin <= 1.3.4 - SQL Injection Vulnerability — Ultimate WP Mail CWE-89 8.5 High 2025-05-07
CVE-2025-47466 WordPress Ultimate WP Mail plugin <= 1.3.4 - Cross Site Request Forgery (CSRF) Vulnerability — Ultimate WP Mail CWE-352 5.4 Medium 2025-05-07
CVE-2025-32694 WordPress Ultimate WP Mail plugin <= 1.3.10 - Open Redirection vulnerability — Ultimate WP Mail CWE-601 4.7 Medium 2025-04-09
CVE-2024-12410 Front End Users <= 3.2.32 - Authenticated (Admin+) SQL injection — Front End Users CWE-89 4.9 Medium 2025-04-02
CVE-2025-2005 Front-End-Only-Users <= 3.2.32 - Unauthenticated Arbitrary File Upload — Front End Users CWE-434 9.8 Critical 2025-04-02
CVE-2025-30861 WordPress Five Star Restaurant Reservations plugin <= 2.6.29 - Broken Access Control vulnerability — Five Star Restaurant Reservations CWE-862 4.9 Medium 2025-03-27
CVE-2025-26877 WordPress Front End Users Plugin <= 3.2.30 - Cross Site Scripting (XSS) vulnerability — Front End Users CWE-79 6.5 Medium 2025-02-25
CVE-2024-13563 Front End Users <= 3.2.30 - Authenticated (Contributor+) Stored Cross-Site Scripting via forgot-password Shortcode — Front End Users CWE-79 6.4 Medium 2025-02-15
CVE-2024-7607 Front End Users <= 3.2.28 - Authenticated (Contributor+) Time-Based SQL Injection — Front End Users CWE-89 8.8 High 2024-08-29
CVE-2024-7606 Front End Users <= 3.2.28 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode — Front End Users CWE-79 6.4 Medium 2024-08-29

This page lists every published CVE security advisory associated with rustaurius. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.