Really Simple Security logo

Log out
Get PRO

Latest

Input validation vulnerability in WPCafe – Online Food Ordering, Restaurant Menu, Delivery, and Reservations for WooCommerce 2.2.28

  • Severity: high-risk
  • Status: Fixed
  • Publication: August 7, 2024

The WPCafe plugin for WordPress, which helps with online food ordering, restaurant menus, delivery, and reservations, has a security issue that could potentially put your website at risk. This vulnerability, known as Local File Inclusion, affects all versions up to 2.2.28 and can be exploited by attackers with contributor-level access or higher. It allows them to include and execute any file on the server, including PHP files, which could lead to unauthorized access and the execution of malicious code. This could result in a breach of sensitive information or control over your website.

Detected in:

**WPCafe: Food Menu, Ordering, Reservation, and Delivery Solution – All in One Place!** fixed vulnerable versions:
Restaurant Menu, Online Food Ordering and Reservation Booking Plugin – WPCafe fixed vulnerable versions:
WPCafe – Online Food Ordering, Restaurant Menu, Delivery, and Reservations for WooCommerce fixed vulnerable versions:
WPCafe: Restaurant Menu, Online Food Ordering, Delivery and Table Reservation Plugin fixed vulnerable versions:
WPCafe: Restaurant Menu, Online Ordering, Reservation, and Delivery Solution fixed vulnerable versions:

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

  • Incorrect?

Is this information incorrect? Please leave us a message.