What’s Vulnerable › Products

WPCafe vulnerabilities

3 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 3 published in the last 12 months.

Check whether your WPCafe version is affected

Latest WPCafe vulnerabilities

• CVE-2026-86816 — WPCafe < 3.0.21 - Unauthenticated Product Data Disclosure via REST API (CVSS 5.3)
• CVE-2026-86812 — WPCafe 3.0.10 - 3.0.17 - Unauthenticated Order Disclosure and Modification via food-orders REST API (CVSS 6.5)
• CVE-2026-14550 — WPCafe < 3.0.18 - Unauthenticated Reservation Approval Bypass via Missing Authorization (CVSS 5.3)