Arraytics Wpcafe vulnerabilities

5 vulnerabilities

Known vulnerabilities in Arraytics Wpcafe, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

8.8CVE-2025-39452arrayticswpcafe+1
EPSS score
0.80%
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Arraytics WPCafe wp-cafe allows PHP Local File Inclusion.This issue affects WPCafe: from n/a through <= 2.2.32.8.8CVE-2025-30829arrayticswpcafe+1
EPSS score
1.11%
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Arraytics WPCafe wp-cafe allows PHP Local File Inclusion.This issue affects WPCafe: from n/a through <= 2.2.31.9.1CVE-2026-27071arrayticswpcafe+1
EPSS score
0.45%
Missing Authorization vulnerability in Arraytics WPCafe wp-cafe allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WPCafe: from n/a through <= 3.0.7.4.3CVE-2026-57622arrayticswpcafe+1
EPSS score
0.27%
Subscriber Broken Access Control in WPCafe <= 3.0.14 versions.9.8CVE-2023-47805arrayticswpcafe+2
EPSS score
0.50%
Missing Authorization vulnerability in Arraytics WPCafe wp-cafe allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WPCafe: from n/a through <= 2.2.22.