arraytics wpcafe vulnerabilities, newest first

By year: all 2026 2025 2024 2023 2022 2021

1. 5.4CVE-2026-124408EPSS 0.2%2026-11-11

   Missing Authorization vulnerability in Arraytics WPCafe wp-cafe allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WPCafe: from n/a through 3.0.22.

2. 4.3CVE-2026-57622EPSS 0.3%2026-06-26

   Subscriber Broken Access Control in WPCafe <= 3.0.14 versions.

3. 9.1CVE-2026-27071EPSS 0.3%2026-03-25

   Missing Authorization vulnerability in Arraytics WPCafe wp-cafe allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WPCafe: from n/a through <= 3.0.7.

4. 7.5CVE-2025-39452EPSS 0.8%2025-04-17

   Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Arraytics WPCafe wp-cafe allows PHP Local File Inclusion.This issue affects WPCafe: from n/a through <= 2.2.32.

5. 7.5CVE-2025-30829EPSS 1.1%2025-03-27

   Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Arraytics WPCafe wp-cafe allows PHP Local File Inclusion.This issue affects WPCafe: from n/a through <= 2.2.31.