ReDi Restaurant Reservation – Instant Restaurant Booking & Table Reservation System
ReDi Restaurant Reservation – Instant Restaurant Booking & Table Reservation System has 8 disclosed vulnerabilities in the WordSec catalog, reported between 2021 and 2025; all 8 are fixed as of October 2026. Their average CVSS score is 5.6, and the most serious one scores 7.2 out of 10. Severity breakdown: 0 critical and 1 high. 2024 was the busiest year with 5 disclosures.
The most common weakness is Cross-Site Scripting, behind 4 of the records (50%). Other recurring categories include Cross-Site Request Forgery (CSRF), Missing Authorization.
Every one of the 8 issues recorded for ReDi Restaurant Reservation – Instant Restaurant Booking & Table Reservation System has a vendor fix available, so running the current release closes all known holes.
8 independent researchers contributed these findings, one record each. ReDi Restaurant Reservation – Instant Restaurant Booking & Table Reservation System is installed on roughly 800 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.3.
CVE-2021-24299ReDi Restaurant Reservation <= 21.0307 - Stored Cross-Site Scripting
Read the full analysisVulnerability Records

ReDi Restaurant Reservation – Instant Restaurant Booking & Table Reservation System
Author
catkin
ReDi is a restaurant reservation and table booking plugin for WordPress. Accept online table bookings with an instant availability check and instant confirmation. Your guests book a table in seconds, and you get a fully automated restaurant booking system — no manual email confirmations, with personalized notifications about the reservation status. In short, convert website visitors into restaurant guests. Why restaurants choose ReDi Proven in real restaurants – about 400 restaurants in 300+ cities, nearly 5 million reservations processed. Maintained, not abandoned – tested with every new WordPress release; see the Changelog for regular updates. Real support – every day 07:00–23:00 CET via WhatsApp, email and Facebook, usually within 10 minutes. Multilingual support: English natively, other languages via translation. Plugin and booking form available in 9+ languages. Your bookings, always accessible – manage reservations from the ReDi dashboard on any device, even when your WordPress site is offline Done for You – prefer not to set it up yourself? We configure ReDi for you. How does ReDi compare? We publish a weekly health check of popular WordPress restaurant booking plugins: WordPress compatibility, last update, known vulnerabilities and announced shutdowns, scored with the same public rules for every plugin. See the comparison Switching from GloriaFood? GloriaFood table reservations end on 30 April 2027. ReDi imports your opening hours and reservation settings so you can switch without losing bookings. How to migrate from GloriaFood Get started in 3 steps Install and activate the plugin (Plugins > Add New > search “ReDi Restaurant Reservation”). Register and generate your API key — a “Reservation” page with the booking form is created automatically. Set your opening hours, capacity and restaurant details. Done. Plugin overview video Key features Instant availability check and confirmation – before confirming, ReDi checks that the restaurant is open, that capacity is enough and that seats are free at that time. No manual approval needed (manual confirmation is optional). Mobile-friendly booking form – works on phones, tablets and desktops; guests see only the times that are really available. Capacity control – maximum seats per weekday, party size limits, multiple opening times per day. Blocked times – stop online bookings for a period and show guests the reason. Waiting list – guests can join the waitlist when you are fully booked. Guest self-service – guests cancel or modify bookings online by reservation number, email, phone or name. Custom fields – ask for anything you need: occasion, allergies note, high chair, GDPR consent. Multilingual emails – customizable confirmation emails in 20+ languages. Integrations for developers – webhook on new reservation, Google Tag Manager event, public API. Plans All plans use the same booking form and instant confirmation. Prices and billing options: reservationdiary.eu/pricing Free – no time limit Up to 100 guests per month Instant availability check and instant confirmation (manual confirmation optional) Custom fields (simple) Waiting list Daily reservations email Basic – one restaurant, 30-day free trial Everything in Free, with unlimited reservations Dashboard for managing reservations, including a tablet view for the host Multiple working hours per day Statistics and CSV export Email template customization Daily notes and internal comments After-visit feedback request Custom fields (dropdown, options) Full – all add-ons Everything in Basic Table management and automatic table assignment Pre-payment during reservation to reduce no-shows Discounts and daily offers Email marketing: Mailchimp, Newsletter plugin, Brevo (Sendinblue) SMS notifications: Twilio, BulkSMS, PushBullet WhatsApp notifications: Twilio, Ultramsg Done for You Everything in Full We set up and configure ReDi for you Priority help to get live quickly Agency / multi-location Manage multiple venues in one dashboard White-label options, custom API access, volume discounts Book a call AI Concierge (premium service) Never miss a call — and never miss the revenue behind it. The ReDi AI Concierge answers your restaurant’s phone and WhatsApp, speaks with guests naturally in multiple languages, and books reservations directly into ReDi. It also answers guest questions about opening hours, location, menu — anything you train it on. Use it as a full-time receptionist or as a backup outside working hours and during peak times. Availability is currently limited — contact us at info@reservationdiary.eu to learn more. Custom services (on request) Additional languages for the reservation form Reservation module for restaurant catalogues and directories Your own integration via our public API Contact us: info@reservationdiary.eu or WhatsApp — all contact details are on reservationdiary.eu. Supported languages Catalan, Czech, Danish, Dutch, English, Estonian, Finnish, French, German, Hebrew, Hungarian, Italian, Japanese, Latvian, Lithuanian, Norwegian, Polish, Portuguese, Russian, Slovak, Spanish, Swedish, Turkish. Need another language? Contact us. Resources Documentation Video tutorials Live demo of the host dashboard Facebook page External services ReDi is a hosted reservation service. The plugin connects to the following external services: ReDi Reservation API (api.reservationdiary.eu) – required for the plugin to work. Used to register your restaurant and API key, load availability, and create, modify and cancel reservations. Sent: restaurant settings; for each booking the date, time, party size and the guest details entered in the form (name, email, phone, comments, custom fields). Data is sent when you save settings and when a guest checks availability or books. Provided by CATZ SOFT OÜ – Terms, Privacy policy. Google reCAPTCHA v3 – only if you enable captcha in settings. Protects the booking form from spam; Google receives the visitor’s IP address and browser data when the form is shown. Google Terms, Google Privacy Policy. Google Tag Manager – only if you add your GTM container ID. Sends a reservation event to your own GTM container. Google Privacy Policy. YouTube – tutorial videos embedded in the plugin settings pages load from YouTube when the settings page is opened. Google Privacy Policy. “Report a problem” form – when you submit it, the restaurant name, API key, contact email, description and attachments are sent to ReDi support (info@reservationdiary.eu).
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C