Input validation vulnerability in Five Star Restaurant Menu and Food Ordering 2.4.10

The Five Star Restaurant Menu and Food Ordering plugin is a popular plugin for WordPress websites. Unfortunately, all versions up to and including 2.4.10 have a security vulnerability which could be exploited by an unauthenticated attacker. This vulnerability is called PHP Object Injection and it involves the injection of a malicious code through the ‘options’ parameter supplied via the ‘fdm_update_cart_item’ AJAX action. This malicious code could be used to delete files, access sensitive data or even execute code on the target system, depending on what other plugins or themes are installed.