WPCafe vulnerabilities

4 known vulnerabilities in WPCafe from Themewinter. 4 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  WPCafe: Missing Authorization

  CVE-2023-47805Dec 9, 2024Arraytics

  Missing Authorization vulnerability in Arraytics WPCafe wp-cafe allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WPCafe: from n/a through <= 2.2.22.

• 8.8 High severity

  WPCafe: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2024-43135Aug 13, 2024Themewinter

  Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Themewinter WPCafe allows PHP Local File Inclusion.This issue affects WPCafe: from n/a through 2.2.28.

• 8.8 High severity

  WPCafe: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2024-37513Jul 9, 2024Themewinter

  Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Themewinter WPCafe allows Path Traversal.This issue affects WPCafe: from n/a through 2.2.27.

• 8.8 High severity

  WPCafe – Restaurant Menu, Online Food Ordering…: Improper Control of Filename for Include/Require Statement in PHP Program

  CVE-2024-5431Jun 25, 2024Arraytics

  The WPCafe – Online Food Ordering, Restaurant Menu, Delivery, and Reservations for WooCommerce plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 2.2.25 via the reservation_extra_field shortcode parameter. This mak