Input validation vulnerability in WPCafe – Online Food Ordering, Restaurant Menu, Delivery, and Reservations for WooCommerce 2.2.25

. The WPCafe plugin for WordPress, which allows users to order food, view restaurant menus, make reservations, and receive deliveries, has a security vulnerability. This vulnerability, known as Local File Inclusion, exists in all versions up to 2.2.25 of the plugin. It can be exploited by attackers who have Contributor-level access or higher, which means they have some level of permission to the website. By using a certain shortcode parameter, these attackers can access and execute code from remote files on the server, which could cause harm to the website.