CAFEHAUS API vulnerabilities
We track 1 vulnerability in CAFEHAUS API products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on July 24, 2026.
1vulnerabilities
0critical
1high
0exploited
7.5average CVSS score
Latest CAFEHAUS API vulnerabilities
- 7.5 High severity
CAFEHAUS API: Improper Privilege Management
The CAFEHAUS API WordPress plugin through 1.0.0 does not have any authentication or authorisation when updating user passwords, allowing unauthenticated attackers to set the password of any user, including administrators, and fully take over their accounts.