CVE-2025-46251

Summary

CVE-2025-46251 is a Cross-Site Request Forgery (CSRF) vulnerability affecting the VikRestaurants Table Reservations and Take-Away plugin. This issue allows unauthorized users to submit malicious requests on behalf of other users, potentially leading to data manipulation or unintended actions. The vulnerability exists in versions 1.3.3 and below, and users are strongly advised to upgrade as soon as possible to mitigate this risk. A successful exploit of this CSRF vulnerability could result in significant consequences, including unauthorized changes to table reservations or access to sensitive customer information.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.