Themewinter Wpcafe vulnerabilities

• arraytics wpcafe WordPress WPCafe plugin <= 2.2.22 - Broken Access Control vulnerability CVE-2023-47805 5.3 MediumDecember 9, 2024
• arraytics wpcafe WordPress WPCafe plugin <= 2.2.28 - Local File Inclusion vulnerability CVE-2024-43135 7.5 HighAugust 13, 2024
• arraytics wpcafe WordPress WPCafe plugin <= 2.2.27 - Local File Inclusion vulnerability CVE-2024-37513 8.5 HighJuly 9, 2024
• themewinter wpcafe, arraytics wpcafe – restaurant menu, online food ordering & table booking system +1 more WPCafe – Online Food Ordering, Restaurant Menu, Delivery, and Reservations for WooCommerce <= 2.2.25 - Authenticated (Contributor+) File inclusion via Shortcode CVE-2024-5431 8.8 HighJune 25, 2024
• themewinter wpcafe, arraytics wpcafe – restaurant menu, online food ordering & table booking system +1 more WPCafe – Online Food Ordering, Restaurant Menu, Delivery, and Reservations for WooCommerce <= 2.2.24 - Authenticated (Contributor+) Stored Cross-Site Scripting via Reservation Form Shortcode CVE-2024-5427 6.4 MediumMay 31, 2024
• themewinter wpcafe, arraytics wpcafe – restaurant menu, online food ordering & table booking system +1 more WPCafe <= 2.2.23 - Unauthenticated Blind Server-Side Request Forgery CVE-2024-1855 5.3 MediumMay 23, 2024