Skip to content
Noroxi

WPCafe

wp-cafe · plugin

Known security vulnerabilities for WPCafe. Find out in seconds which version runs on your site with WP Lens.

11 known vulnerabilities

2 critical · latest Jul 10, 2026

Vulnerabilities

  • CVE-2023-47805

    WordPress WPCafe plugin <= 2.2.22 - Broken Access Control vulnerability

    Critical 9.8

  • CVE-2026-27071

    WordPress WPCafe plugin <= 3.0.7 - Broken Access Control vulnerability

    Critical 9.1

  • CVE-2024-43135

    WordPress WPCafe plugin <= 2.2.28 - Local File Inclusion vulnerability

    High 8.8

  • CVE-2024-37513

    WordPress WPCafe plugin <= 2.2.27 - Local File Inclusion vulnerability

    High 8.8

  • CVE-2024-5431

    WPCafe – Online Food Ordering, Restaurant Menu, Delivery, and Reservations for WooCommerce <= 2.2.25 - Authenticated (Contributor+) File inclusion via Shortcode

    High 8.8

  • CVE-2025-39452

    WordPress WPCafe plugin <= 2.2.32 - Local File Inclusion vulnerability

    High 7.5

  • CVE-2025-30829

    WordPress WPCafe plugin <= 2.2.31 - Local File Inclusion vulnerability

    High 7.5

  • CVE-2026-11818

    WPCafe <= 3.0.14 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Modification via REST API

    Medium 5.4

  • CVE-2024-5427

    WPCafe – Online Food Ordering, Restaurant Menu, Delivery, and Reservations for WooCommerce <= 2.2.24 - Authenticated (Contributor+) Stored Cross-Site Scripting

    Medium 5.4

  • CVE-2024-1855

    WPCafe <= 2.2.23 - Unauthenticated Blind Server-Side Request Forgery

    Medium 5.3

  • CVE-2026-57622

    WordPress WPCafe plugin <= 3.0.14 - Broken Access Control vulnerability

    Medium 4.3

← Back to directory