Skip to content
CVE PROGRAM SOURCE RECORD8.8 High

CVE-2024-5431

WPCafe – Online Food Ordering, Restaurant Menu, Delivery, and Reservations for WooCommerce <= 2.2.25 - Authenticated (Contributor+) File inclusion via Shortcode

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Wordfence

Description

The WPCafe – Online Food Ordering, Restaurant Menu, Delivery, and Reservations for WooCommerce plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 2.2.25 via the reservation_extra_field shortcode parameter. This makes it possible for authenticated attackers, with Contributor-level access and above, to include remote files on the server, potentially resulting in code execution

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

arraytics WPCafe – Restaurant Menu, Online Food Ordering & Table Booking System

Default version status: unaffected

  • 0 to ≤ 2.2.25affected

References