Quick Restaurant Reservations

Quick Restaurant Reservations has 3 disclosed vulnerabilities in the WordSec catalog, reported between 2022 and 2026; 2 are fixed and 1 remains unpatched as of September 2026. Their average CVSS score is 6.7, and the most serious one scores 8.8 out of 10. Severity breakdown: 0 critical and 1 high. 2022 was the busiest year with 2 disclosures.

The most common weakness is Cross-Site Request Forgery (CSRF), behind 1 of the records (33%). Other recurring categories include Cross-Site Scripting, Missing Authorization.

2 of the records (67%) have a vendor fix, while 1 remain unpatched. The oldest unresolved one dates back to 2026.

3 independent researchers contributed these findings, one record each. Quick Restaurant Reservations is installed on roughly 500 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.2.11.

Strategic Overview

Avg CVSSMedium
6.7/ 10
Patch Coverage67%
Open

1

Fixed

2

Get automatic notifications for all Quick Restaurant Reservations vulnerabilities before they are exploited.

Most severe open issueCVSS 5.3CVE-2026-24529

Quick Restaurant Reservations <= 1.6.7 - Missing Authorization

Read the full analysis

Vulnerability Records

3 records
Quick Restaurant Reservations banner
Latestv1.6.7

Quick Restaurant Reservations

Alejandro

Author

Alejandro

4.9(10)
98/100
Last Updated
2023-04-02 (4y ago)
Active Installs
500+
Downloads
25,954
Requires WP
3.5+
Requires PHP
0+
Tested up to
WP 6.2.11
Created
2017-11-28 (9y ago)

Quick Restaurant Reservations is the easiest way to manage your restaurant bookings. Confirm / Reject reservations and send notifications to your customers. Manage several schedules, dates and time intervals. Quick Restaurant Reservations Features The plugin uses default WordPress functionality. Creates custom post types for Restaurants, Bookings and Clients. Unlimited bookings Bookings per restaurant Pending, Confirm, Reject, Cancel status. Notify customers about their booking status via email. Manual confirmation. Define min / max party Early / Late bookings Date format Custom message after form submitted Custom redirect after form submitted Unlimited schedules Schedule status open / close Define week days and time interval for each schedule Customize email notifications (admin, pending, confirmed, rejected, update) Clients list Form fields: date, party, time, name, email, phone, message NEW PLUGIN FOR RESTAURANT RESERVATIONS 2023 Check our brand NEW PLUGIN Alex Reservations New full screen dashboard for managing bookings Multiple restaurants (multisite and single site) Floor plan with tables management Tables designer with drag & drop Monthly view Weekly view Timeline view Customers CRM Custom emails Bookings Tags Customers Tags Beautiful reports Multi language & responsive widget for mobile Manage Shifts and Events with different widgets Customer can cancel booking Ask customers for feedback QRR ADD-ON Features Unlimited restaurants Each restaurant has its own page and booking form Automatic confirmations Set max capacity based on number of seats Set max capacity based on tables Limit automatic confirmation to max party Limit automatic confirmation until X seats reached Customize logo of email notifications Monthly calendar view Daily calendar view Unlimited form custom fields Make sure to review our ADD-ONS for Quick Restaurant Reservations page for more detailed information. How to use Add the shortcode of the restaurant form in any existing post or page: [qrr_form id="123"] Customization For custom development CONTACT US

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C