CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
What the vulnerability does
The WPCafe – Online Food Ordering, Restaurant Menu, Delivery, and Reservations for WooCommerce plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 2.2.25 via the reservation_extra_field shortcode parameter. This makes it possible for authenticated attackers, with Contributor-level access and above, to include remote files on the server, potentially resulting in code execution
Explanation of Vulnerability in Simple Terms
WPCafe versions up to 2.2.25 contain a remote code execution vulnerability accessible to authenticated users with low privileges. An attacker with a basic user account can execute arbitrary PHP code on the site, potentially compromising the entire WordPress installation. The vulnerability stems from insufficient input validation in a core function. All sites running affected versions should update immediately.
What an attacker can do
Run their own PHP code on the site and take full control of it.
Potential impact on your site
Any registered user can compromise your site, steal data, modify content, or inject malware.
Conditions required to exploit
Attacker needs a low-privilege user account (e.g., subscriber or customer role) on the site.
Key dates
External resources
Related vulnerabilities
