Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

6 records

Vendor: Themewinter Component: Wpcafe Clear all filters
TI-2023-25913 CVE-2023-47805 · GHSA-xv9g-hfxf-cg8g

WordPress WPCafe plugin <= 2.2.22 - Broken Access Control vulnerability

Priority MEDIUM 49

Missing Authorization vulnerability in Arraytics WPCafe wp-cafe allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WPCafe: from n/a through <= 2.2.22.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00497 Published 2024-12-09 No fix listed CWE-862
TI-2024-28806 CVE-2024-43135 · GHSA-xfgq-g492-6m25

WordPress WPCafe plugin <= 2.2.28 - Local File Inclusion vulnerability

Priority MEDIUM 41

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Themewinter WPCafe allows PHP Local File Inclusion.This issue affects WPCafe: from n/a through 2.2.28.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00525 Published 2024-08-13 No fix listed CWE-22
TI-2024-25017 CVE-2024-37513 · GHSA-vx4h-hw7f-47c3

WordPress WPCafe plugin <= 2.2.27 - Local File Inclusion vulnerability

Priority MEDIUM 41

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Themewinter WPCafe allows Path Traversal.This issue affects WPCafe: from n/a through 2.2.27.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00563 Published 2024-07-09 No fix listed CWE-22
TI-2024-05047 CVE-2024-5431 · GHSA-888r-932r-wcrp

WPCafe – Online Food Ordering, Restaurant Menu, Delivery, and Reservations for…

Priority MEDIUM 41

The WPCafe – Online Food Ordering, Restaurant Menu, Delivery, and Reservations for WooCommerce plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 2.2.25 via the reservation_e…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00593 Published 2024-06-25 No fix listed CWE-98
TI-2024-05043 CVE-2024-5427 · GHSA-qfp7-gc56-5hcj

Cross-site scripting in Arraytics WPCafe – Restaurant Menu, Online Food Ordering & Table…

Priority LOW 28

The WPCafe – Online Food Ordering, Restaurant Menu, Delivery, and Reservations for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Reservation Form shortcode in all versions…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00321 Published 2024-05-31 No fix listed CWE-79
TI-2024-01727 CVE-2024-1855 · GHSA-w7qp-vgwj-6g7r

WPCafe <= 2.2.23 - Unauthenticated Blind Server-Side Request Forgery

Priority LOW 30

The WPCafe – Restaurant Menu, Online Ordering for WooCommerce, Pickup / Delivery and Table Reservation plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 2.2.23 via th…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00436 Published 2024-05-23 No fix listed CWE-918