Read the docs

Themewinter

Records23All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical3CVSS 9.0–10.0
CVSS high12CVSS 7.0–8.9

Exploited now

Themewinter records in CISA KEV

No Themewinter vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Eventin 16 records HIGH Wpcafe 6 records MEDIUM

Records

6 records in Wpcafe · all components

TI-2023-25913 CVE-2023-47805 · GHSA-xv9g-hfxf-cg8g

WordPress WPCafe plugin <= 2.2.22 - Broken Access Control vulnerability

Priority MEDIUM 49

Missing Authorization vulnerability in Arraytics WPCafe wp-cafe allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WPCafe: from n/a through <= 2.2.22.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00497 Published 2024-12-09 No fix listed CWE-862
TI-2024-28806 CVE-2024-43135 · GHSA-xfgq-g492-6m25

WordPress WPCafe plugin <= 2.2.28 - Local File Inclusion vulnerability

Priority MEDIUM 41

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Themewinter WPCafe allows PHP Local File Inclusion.This issue affects WPCafe: from n/a through 2.2.28.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00525 Published 2024-08-13 No fix listed CWE-22
TI-2024-25017 CVE-2024-37513 · GHSA-vx4h-hw7f-47c3

WordPress WPCafe plugin <= 2.2.27 - Local File Inclusion vulnerability

Priority MEDIUM 41

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Themewinter WPCafe allows Path Traversal.This issue affects WPCafe: from n/a through 2.2.27.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00563 Published 2024-07-09 No fix listed CWE-22
TI-2024-05047 CVE-2024-5431 · GHSA-888r-932r-wcrp

WPCafe – Online Food Ordering, Restaurant Menu, Delivery, and Reservations for…

Priority MEDIUM 41

The WPCafe – Online Food Ordering, Restaurant Menu, Delivery, and Reservations for WooCommerce plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 2.2.25 via the reservation_e…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00593 Published 2024-06-25 No fix listed CWE-98
TI-2024-01727 CVE-2024-1855 · GHSA-w7qp-vgwj-6g7r

WPCafe <= 2.2.23 - Unauthenticated Blind Server-Side Request Forgery

Priority LOW 30

The WPCafe – Restaurant Menu, Online Ordering for WooCommerce, Pickup / Delivery and Table Reservation plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 2.2.23 via th…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00436 Published 2024-05-23 No fix listed CWE-918
TI-2024-05043 CVE-2024-5427 · GHSA-qfp7-gc56-5hcj

Cross-site scripting in Arraytics WPCafe – Restaurant Menu, Online Food Ordering & Table…

Priority LOW 28

The WPCafe – Online Food Ordering, Restaurant Menu, Delivery, and Reservations for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Reservation Form shortcode in all versions…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00321 Published 2024-05-31 No fix listed CWE-79
Open these records in search →