WP
Product
WPCafe
by · last CVE Oct 7, 2026
3
CVEs
0
On KEV
6.5
Max CVSS
1
New 30D
Severity mix
Critical 0High 0Medium 3Low 0
Watch

Add WPCafe to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-86812
6.5
0%
Sep 11
WPCafe 3.0.10 - 3.0.17 - Unauthenticated Order Disclosure and Modification via food-orders REST API
Affected: 3.0.10 before 3.0.18
CVE-2026-86816
5.3
0%
Oct 7
WPCafe < 3.0.21 - Unauthenticated Product Data Disclosure via REST API
Affected: before 3.0.21
CVE-2026-14550
5.3
0%
Aug 26
WPCafe < 3.0.18 - Unauthenticated Reservation Approval Bypass via Missing Authorization
Affected: before 3.0.18
Showing 3