CVE-2026-54830 Etoile Web Design Incorporated CVE debrief

Who should care

Administrators and security teams using the Five Star Restaurant Reservations plugin, especially those with versions up to 2.7.19, should be aware of this vulnerability. Given its high severity and potential for unauthorized access, immediate attention is recommended. Security practitioners and WordPress administrators should review their inventory and consider updating or applying patches.

Technical summary

CVE-2026-54830 is a high-severity vulnerability (CVSS score of 7.5) affecting the Five Star Restaurant Reservations plugin. The vulnerability is categorized as Unauthenticated Broken Access Control and impacts versions up to 2.7.19. The CVSS vector is CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N, indicating a high impact on integrity. The CWE-862 weakness is associated with this vulnerability. The CVE was published on June 25, 2026, and last modified on June 29, 2026.

Defensive priority

This vulnerability has a high CVSS score of 7.5 and is categorized as Unauthenticated Broken Access Control. Given its potential for unauthorized access and high impact on integrity, it should be prioritized for immediate attention and mitigation.

Recommended defensive actions

• Review and update the Five Star Restaurant Reservations plugin to a version beyond 2.7.19 if possible.
• Apply patches or mitigations provided by the vendor or third-party sources like Patchstack.
• Conduct a thorough inventory check of your WordPress installations to identify potentially affected plugins.
• Consider implementing compensating controls or monitoring to detect potential exploitation attempts.
• Track exception and remediation efforts for CVE-2026-54830.

Evidence notes

The CVE record and NVD details provide official information on this vulnerability. A mitigation reference from Patchstack offers additional context. The vulnerability affects versions up to 2.7.19 of the Five Star Restaurant Reservations plugin. The CVSS vector and CWE-862 weakness provide technical details on the vulnerability's characteristics.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.