WPCafe vulnerabilities | LiveThreat CVE Feed — Verisq

Login Request a demo

WP

Product

WPCafe

by Themewinter · last CVE Dec 9, 2024

6

CVEs

0

On KEV

9.8

Max CVSS

0

New 30D

Vulnerabilities6 In the news0 Timeline

Severity mix

Critical 1High 3Medium 2Low 0

Severity

All severities6 Critical1 High3 Medium2 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add WPCafe to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2023-47805	9.8	0%	Dec 9	WordPress WPCafe plugin <= 2.2.22 - Broken Access Control vulnerability Affected: before 2.2.23
CVE-2024-43135	8.8	1%	Aug 13	WordPress WPCafe plugin <= 2.2.28 - Local File Inclusion vulnerability Affected: through 2.2.28
CVE-2024-37513	8.8	1%	Jul 9	WordPress WPCafe plugin <= 2.2.27 - Local File Inclusion vulnerability Affected: through 2.2.27
CVE-2024-5431	8.8	1%	Jun 25	WPCafe – Online Food Ordering, Restaurant Menu, Delivery, and Reservations for WooCommerce <= 2.2.25 - Authenticated (Contributor+) File inclusion via Shortcode Affected: before 2.2.26
CVE-2024-5427	5.4	0%	May 31	WPCafe – Online Food Ordering, Restaurant Menu, Delivery, and Reservations for WooCommerce <= 2.2.24 - Authenticated (Contributor+) Stored Cross-Site Scripting via Reservation Form Shortcode Affected: before 2.2.26
CVE-2024-1855	5.3	0%	May 23	WPCafe <= 2.2.23 - Unauthenticated Blind Server-Side Request Forgery Affected: before 2.2.24