Advisories · Technology
arraytics WPCafe – Restaurant Menu, Online Food Ordering & Table Booking System.
Every CVE that names arraytics WPCafe – Restaurant Menu, Online Food Ordering & Table Booking System among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 5.3 Medium
WPCafe <= 3.0.19 - Missing Authorization to Unauthenticated Arbitrary Email Notification Flow Read/Create/Update/Delete
- arraytics WPCafe – Restaurant Menu, Online Food Ordering & Table Booking System
- Broken access control
- CVSS 7.5 High
WPCafe <= 3.0.18 - Authenticated (Contributor+) Local File Inclusion via 'food_menu_style' Elementor Widget Setting
- arraytics WPCafe – Restaurant Menu, Online Food Ordering & Table Booking System
- File inclusion
- CVSS 5.4 Medium
WPCafe <= 3.0.14 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Modification via REST API
- arraytics WPCafe – Restaurant Menu, Online Food Ordering & Table Booking System
- Broken access control
- CVSS 8.8 High
WPCafe – Online Food Ordering, Restaurant Menu, Delivery, and Reservations for WooCommerce <= 2.2.25 - Authenticated (Contributor+) File inclusion via Shortcode
- arraytics WPCafe – Restaurant Menu, Online Food Ordering & Table Booking System
- File inclusion
- CVSS 6.4 Medium
WPCafe – Online Food Ordering, Restaurant Menu, Delivery, and Reservations for WooCommerce <= 2.2.24 - Authenticated (Contributor+) Stored Cross-Site Scripting via Reservation Form Shortcode
- arraytics WPCafe – Restaurant Menu, Online Food Ordering & Table Booking System
- Cross-site scripting (XSS)
- CVSS 5.3 Medium
WPCafe <= 2.2.23 - Unauthenticated Blind Server-Side Request Forgery
- arraytics WPCafe – Restaurant Menu, Online Food Ordering & Table Booking System
- Server-side request forgery (SSRF)