Input validation vulnerability in RestroPress – Online Food Ordering System 2.8.2

The RestroPress plugin for WordPress has a security flaw in versions up to and including 2.8.2. This flaw makes it possible for an unauthenticated attacker to modify the contents of other users’ shopping carts. This could happen if an attacker can trick a site administrator into clicking on a malicious link. To protect against this, nonce validation needs to be added to various AJAX actions.