Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

WPCafe – Restaurant Menu, Online Food Ordering & Table Booking System — Vulnerabilities & Security Advisories 4

All 4 CVE vulnerabilities found in WPCafe – Restaurant Menu, Online Food Ordering & Table Booking System, with AI-generated Chinese analysis, references, and POCs.

Vendor: arraytics

CVE IDTitleCVSSSeverityPublished
CVE-2026-11818 WPCafe <= 3.0.14 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Modification via REST API CWE-862 5.4 Medium2026-07-10
CVE-2024-5431 WPCafe – Online Food Ordering, Restaurant Menu, Delivery, and Reservations for WooCommerce <= 2.2.25 - Authenticated (Contributor+) File inclusion via Shortcode CWE-98 8.8 High2024-06-25
CVE-2024-5427 WPCafe – Online Food Ordering, Restaurant Menu, Delivery, and Reservations for WooCommerce <= 2.2.24 - Authenticated (Contributor+) Stored Cross-Site Scripting via Reservation Form Shortcode CWE-79 6.4 Medium2024-05-31
CVE-2024-1855 WPCafe <= 2.2.23 - Unauthenticated Blind Server-Side Request Forgery CWE-918 5.3 Medium2024-05-23

All 4 known CVE vulnerabilities affecting WPCafe – Restaurant Menu, Online Food Ordering & Table Booking System with full Chinese analysis, references, and POCs where available.