Restaurante
Restaurante has one disclosed vulnerability in the WordSec catalog, all reported in 2025; it is fixed as of September 2026. Their average CVSS score is 6.1, and the most serious one scores 6.1 out of 10.
The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).
The one issue recorded for Restaurante has a vendor fix available, so running the current release closes it.
All of these findings were reported by Tran Nguyen Bao Khanh. Restaurante is installed on roughly 100 WordPress sites, so each unpatched flaw has a wide blast radius.
CVE-2025-52746Restaurante <= 3.0.7 - Reflected Cross-Site Scripting
Read the full analysisVulnerability Records

Restaurante
Author
AyeCode
Restaurante is a lightweight responsive bootstrap theme for restaurants, barbecues, grill houses, italian restaurants, fast food, pizzerias and more. Features include option to upload your own favicon, customizable background, header & shortcodes. Last but not least it implements microdata, opengraph & twitter cards in order to have the best visibility on search engines and social media.
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C