Plugin icon

WPCafe – Restaurant Menu, Online Food Ordering & Table Booking System

wp-cafe

Vulnerabilities:

9

Last Updated:

April 30, 2026

Active Installs:

6000

Published
Title
Fixed in
CVSS
Published
2026-03-12
Title
WPCafe – Restaurant Menu, Online Food Ordering and Reservation Booking Solution < 3.0.8 - Missing Authorization
Fixed in
Fixed in 3.0.8
CVSS
5.3 (medium)
Published
2025-04-17
Title
WPCafe < 2.2.33 - Authenticated (Contributor+) Local File Inclusion
Fixed in
Fixed in 2.2.33
CVSS
8.8 (high)
Published
2025-03-27
Title
WPCafe < 2.2.32 - Authenticated (Contributor+) Local File Inclusion
Fixed in
Fixed in 2.2.32
CVSS
8.8 (high)
Published
2024-08-07
Title
WPCafe < 2.2.29 - Authenticated (Contributor+) Local File Inclusion
Fixed in
Fixed in 2.2.29
CVSS
8.8 (high)
Published
2024-07-05
Title
WPCafe < 2.2.28 - Authenticated (Contributor+) Local File Inclusion
Fixed in
Fixed in 2.2.28
CVSS
8.8 (high)
Published
2024-06-24
Title
WPCafe – Online Food Ordering, Restaurant Menu, Delivery, and Reservations for WooCommerce < 2.2.26 - Authenticated (Contributor+) File inclusion via Shortcode
Fixed in
Fixed in 2.2.26
CVSS
8.8 (high)
Published
2024-05-30
Title
WPCafe – Online Food Ordering, Restaurant Menu, Delivery, and Reservations for WooCommerce < 2.2.26 - Authenticated (Contributor+) Stored Cross-Site Scripting via Reservation Form Shortcode
Fixed in
Fixed in 2.2.26
CVSS
6.4 (medium)
Published
2024-05-22
Title
WPCafe < 2.2.24 - Unauthenticated Blind Server-Side Request Forgery
Fixed in
Fixed in 2.2.24
CVSS
5.3 (medium)
Published
2023-11-15
Title
WPCafe < 2.2.23 - Missing Authorization
Fixed in
Fixed in 2.2.23
CVSS
5.3 (medium)