CVE-2026-6498 — The Five Star Restaurant Reservations plugin for WordPress
CVE-2026-6498 — The Five Star Restaurant Reservations plugin for WordPress is vulnerable to a payment bypass via PHP type juggling in versions up to, and including, 2.7.16 This is due to the valid_payment() function using a PHP loose comparison (==) between the attacker-controlled payment_id POST pa
What This Means For You
- If your environment is affected by CWE-345, review your exposure and prioritize patching based on your environment. Monitor vendor advisories for CVE-2026-6498 updates and patches.
Related ATT&CK Techniques
🛡️ Detection Rules
2 rules · 6 SIEM formats2 detection rules auto-generated for this incident, mapped to MITRE ATT&CK. Sigma YAML is free — export to any SIEM format via the Intel Bot.
WordPress Five Star Restaurant Reservations Payment Bypass Attempt — CVE-2026-6498
title: WordPress Five Star Restaurant Reservations Payment Bypass Attempt — CVE-2026-6498
id: scw-2026-04-30-ai-1
status: experimental
level: critical
description: |
Detects attempts to exploit CVE-2026-6498 by sending a POST request to the nopriv AJAX handler 'rtb_stripe_pmt_succeed' with an empty payment_id parameter. This bypasses the payment verification in the Five Star Restaurant Reservations plugin for WordPress versions up to 2.7.16.
author: SCW Feed Engine (AI-generated)
date: 2026-04-30
references:
- https://shimiscyberworld.com/posts/nvd-CVE-2026-6498/
tags:
- attack.initial_access
- attack.t1190
logsource:
category: webserver
detection:
selection:
cs-method:
- 'POST'
uri|contains:
- '/wp-admin/admin-ajax.php'
cs-uri-query|contains:
- 'action=rtb_stripe_pmt_succeed'
condition: selection
falsepositives:
- Legitimate administrative activity
Source: Shimi's Cyber World · License & reuse
Indicators of Compromise
| ID | Type | Indicator |
|---|---|---|
| CVE-2026-6498 | vulnerability | CVE-2026-6498 |
| CWE-345 | weakness | CWE-345 |
Written by SCW Vulnerability Desk
Source & Attribution
| Source Platform | NVD |
| Channel | National Vulnerability Database |
| Published | April 30, 2026 at 13:16 UTC |
This content was curated and summarized by Shimi's Cyber World for informational purposes. It is not copied or republished in full. All intellectual property rights remain with the original author and source.
Believe this infringes your rights? Submit a takedown request.
Related coverage
CVE-2026-42800: High-Severity Null Pointer Dereference in ASR Lapwing_Linux
CVE-2026-42800 — NULL pointer dereference vulnerability in ASR1903 in ASR Lapwing_Linux on Linux (ims_client modules) allows Pointer Manipulation. This vulnerability is associated with program files...
CVE-2026-42799: ASR Kestrel Out-of-Bounds Read Flaw Exposes Systems
CVE-2026-42799 — Out-of-bounds read vulnerability in ASR Kestrel (nr_fw modules) allows Overflow Buffers. This vulnerability is associated with program files Code/Nr/nr_fw/RA/src/NrPwrCtrl.C. This issue affects Kestrel:...
ColorOS Assistant CVE-2026-22070: Unauthenticated Path Traversal Risk
CVE-2026-22070 — ColorOS Assistant has an unauthenticated start-download channel, leading to file path traversal.