Really Simple Security logo

Log out
Get PRO

Latest

Access violation vulnerability in WPCafe – Restaurant Menu, Online Ordering for WooCommerce, Pickup / Delivery and Table Reservation 2.2.19

  • Severity: medium-risk
  • Status: Fixed
  • Publication: November 15, 2023

The WPCafe plugin for WordPress has a security vulnerability that can allow unauthenticated attackers to gain access to the plugin’s features without proper authorization. This vulnerability exists in all versions of the plugin up to the latest version 2.2.19 and it is caused by a missing capability check on an unknown function. This vulnerability could result in unauthorized access, modification, or loss of data.

Detected in:

**WPCafe: Food Menu, Ordering, Reservation, and Delivery Solution – All in One Place!** fixed vulnerable versions:
Restaurant Menu, Online Food Ordering and Reservation Booking Plugin – WPCafe fixed vulnerable versions:
WPCafe – Online Food Ordering, Restaurant Menu, Delivery, and Reservations for WooCommerce fixed vulnerable versions:
WPCafe – Restaurant Menu, Online Ordering for WooCommerce, Pickup / Delivery and Table Reservation fixed vulnerable versions: >= * <= 2.2.22
WPCafe – WooCommerce Restaurant Plugin – Online Food Ordering, Delivery, Menu, & Reservations fixed vulnerable versions:
WPCafe: Restaurant Menu, Online Food Ordering, Delivery and Table Reservation Plugin fixed vulnerable versions:
WPCafe: Restaurant Menu, Online Ordering, Reservation, and Delivery Solution fixed vulnerable versions:

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

  • Incorrect?

Is this information incorrect? Please leave us a message.