Arraytics Wpcafe vulnerabilities

• arraytics wpcafe WPCafe < 3.0.21 - Unauthenticated Product Data Disclosure via REST API CVE-2026-86816 5.3 MediumOctober 7, 2026
• arraytics wpcafe – restaurant menu, online food ordering & table booking system WPCafe <= 3.0.19 - Missing Authorization to Unauthenticated Arbitrary Email Notification Flow Read/Create/Update/Delete CVE-2026-11601 5.3 MediumOctober 3, 2026
• arraytics wpcafe – restaurant menu, online food ordering & table booking system WPCafe <= 3.0.18 - Authenticated (Contributor+) Local File Inclusion via 'food_menu_style' Elementor Widget Setting CVE-2026-75028 7.5 HighOctober 3, 2026
• arraytics wpcafe WPCafe 3.0.10 - 3.0.17 - Unauthenticated Order Disclosure and Modification via food-orders REST API CVE-2026-86812 6.5 MediumSeptember 11, 2026
• arraytics wpcafe WPCafe < 3.0.18 - Unauthenticated Reservation Approval Bypass via Missing Authorization CVE-2026-14550 5.3 MediumAugust 26, 2026
• arraytics wpcafe – restaurant menu, online food ordering & table booking system WPCafe <= 3.0.14 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Modification via REST API CVE-2026-11818 5.4 MediumJuly 10, 2026
• arraytics wpcafe WordPress WPCafe plugin <= 3.0.14 - Broken Access Control vulnerability CVE-2026-57622 4.3 MediumJune 26, 2026
• arraytics wpcafe WordPress WPCafe plugin <= 3.0.7 - Broken Access Control vulnerability CVE-2026-27071 9.1 CriticalMarch 25, 2026
• arraytics wpcafe WordPress WPCafe plugin <= 2.2.32 - Local File Inclusion vulnerability CVE-2025-39452 7.5 HighApril 17, 2025
• arraytics wpcafe WordPress WPCafe plugin <= 2.2.31 - Local File Inclusion vulnerability CVE-2025-30829 7.5 HighMarch 27, 2025
• arraytics wpcafe WordPress WPCafe plugin <= 2.2.22 - Broken Access Control vulnerability CVE-2023-47805 5.3 MediumDecember 9, 2024
• arraytics wpcafe WordPress WPCafe plugin <= 2.2.28 - Local File Inclusion vulnerability CVE-2024-43135 7.5 HighAugust 13, 2024
• arraytics wpcafe WordPress WPCafe plugin <= 2.2.27 - Local File Inclusion vulnerability CVE-2024-37513 8.5 HighJuly 9, 2024
• themewinter wpcafe, arraytics wpcafe – restaurant menu, online food ordering & table booking system +1 more WPCafe – Online Food Ordering, Restaurant Menu, Delivery, and Reservations for WooCommerce <= 2.2.25 - Authenticated (Contributor+) File inclusion via Shortcode CVE-2024-5431 8.8 HighJune 25, 2024
• themewinter wpcafe, arraytics wpcafe – restaurant menu, online food ordering & table booking system +1 more WPCafe – Online Food Ordering, Restaurant Menu, Delivery, and Reservations for WooCommerce <= 2.2.24 - Authenticated (Contributor+) Stored Cross-Site Scripting via Reservation Form Shortcode CVE-2024-5427 6.4 MediumMay 31, 2024
• themewinter wpcafe, arraytics wpcafe – restaurant menu, online food ordering & table booking system +1 more WPCafe <= 2.2.23 - Unauthenticated Blind Server-Side Request Forgery CVE-2024-1855 5.3 MediumMay 23, 2024