Approved changes feed: RSS · Atom
cpe:2.3:a:themewinter:wpcafe:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Themewinter (7bed8335-6396-5a51-b2fd-f1e6d2e2b7e3) |
|---|---|
| Product | Wpcafe (51e0c8da-98de-5db1-a422-977f3c82f939) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-39452 |
vulnerable | 2026-06-08 07:23:06.586357 |
WordPress WPCafe plugin <= 2.2.32 - Local File Inclusion vulnerability
HIGH (7.5)
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Arraytics WPCafe wp-cafe allows PHP Local File Inclusion.This issue affects WPCafe: from n/a through <= 2.2.32.
Published: 2025-04-17T15:15:42.576Z
Updated: 2026-04-28T16:12:31.907Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-5431 |
vulnerable | 2026-06-08 06:56:16.008248 |
WPCafe – Online Food Ordering, Restaurant Menu, Delivery, and Reservations for WooCommerce <= 2.2.25 - Authenticated (Contributor+) File inclusion via Shortcode
HIGH (8.8)
The WPCafe – Online Food Ordering, Restaurant Menu, Delivery, and Reservations for WooCommerce plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 2.2.25 via the reservation_extra_field shortcode parameter. This makes it possible for authenticated attackers, with Contributor-level access and above, to include remote files on the server, potentially resulting in code execution
Published: 2024-06-25T05:41:46.543Z
Updated: 2026-04-08T16:55:36.466Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-43135 |
vulnerable | 2026-06-08 06:45:49.657681 |
WordPress WPCafe plugin <= 2.2.28 - Local File Inclusion vulnerability
HIGH (7.5)
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Themewinter WPCafe allows PHP Local File Inclusion.This issue affects WPCafe: from n/a through 2.2.28.
Published: 2024-08-13T10:57:55.675Z
Updated: 2026-04-28T16:10:08.849Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-37513 |
vulnerable | 2026-06-08 06:39:47.756441 |
WordPress WPCafe plugin <= 2.2.27 - Local File Inclusion vulnerability
HIGH (8.5)
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Themewinter WPCafe allows Path Traversal.This issue affects WPCafe: from n/a through 2.2.27.
Published: 2024-07-09T12:18:28.378Z
Updated: 2026-04-28T16:10:00.452Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-1855 |
vulnerable | 2026-06-08 06:27:14.717885 |
WPCafe <= 2.2.23 - Unauthenticated Blind Server-Side Request Forgery
MEDIUM (5.3)
The WPCafe – Restaurant Menu, Online Ordering for WooCommerce, Pickup / Delivery and Table Reservation plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 2.2.23 via the wpc_check_for_submission function. This makes it possible for unauthenticated attackers to make web requests to arbitrary locations originating from the web application.
Published: 2024-05-23T01:56:18.284Z
Updated: 2026-04-08T16:56:23.517Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-47805 |
vulnerable | 2026-06-08 06:14:25.711637 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.