Skip to content

RadicalNotion.AI

We do not sell or share your personal information

© 2026 RadicalNotion.AI

Security Data

CWE Directory
CAPEC Directory
CNA Directory
CNA Report Cards
Data Sources

Calculators

CVSS Calculator
CVSS 4.0
CVSS 3.1
CVSS 3.0
CVSS 2.0

Platform

My Vulnerabilities
Insights
Notifications
Account
Pricing

Learn

All guides
What is a CVE?
What is CVSS?
The CISA KEV catalog
What is EPSS?

Company

About us
Blog
Book a demo

Get Started

Sign up
Log in

Legal

Privacy
Terms

Security data

Weaknesses (CWE)The MITRE CWE weakness catalog
Attack Patterns (CAPEC)MITRE CAPEC attack patterns
CNAsNumbering authorities + report cards
VendorsVulnerabilities by vendor

Tools

CVSS CalculatorScore CVSS 4.0, 3.1, 3.0 & 2.0

Resources

LearnPlain-English security guides
Data SourcesHow we source CVE data

About Us Blog Pricing Book a Demo

Log in

Home
Vendors
Themewinter
Wpcafe

themewinter wpcafe Vulnerabilities: CVEs, CISA KEV & Security Advisories

6 CVEs

themewinter wpcafe Vulnerabilities

CVE security advisories and vulnerability history for wpcafe by themewinter.

6

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

0

Public exploits

With known exploit

7.0

Avg CVSS

2024–2024

Last updated December 9, 2024

Overview

themewinter wpcafe has 6 published CVE records since 2024, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 0 have a known public exploit. The average CVSS base score across scored CVEs is 7.0.

This page aggregates every publicly disclosed vulnerability (CVE) affecting themewinter wpcafe, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.

Severity and exploitation

How the CVSS severity of themewinter wpcafe's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical0

High3

Medium3

Low0

In CISA’s Known Exploited Vulnerabilities catalog

0

None of themewinter wpcafe's CVEs are currently listed in CISA's KEV catalog.

Public exploits

0

No themewinter wpcafe CVEs currently have a tracked public exploit.

Affected versions and CVEs

Browse every themewinter wpcafe version named in a CVE, then pick one to see only the CVEs that affect it.

Fixed in

2.2.262 CVEs
> 2.2.221 CVE
> 2.2.231 CVE
> 2.2.251 CVE
> 2.2.271 CVE
> 2.2.281 CVE
2.2.231 CVE
2.2.241 CVE
2.2.281 CVE
2.2.291 CVE

Find a version

6 CVEs

Sort

WordPress WPCafe plugin <= 2.2.22 - Broken Access Control vulnerability
CVE-2023-47805
Patch
CWE-862
Medium · CVSS 5.3
EPSS 0.7% (73th pct)2024-12-09
WordPress WPCafe plugin <= 2.2.28 - Local File Inclusion vulnerability
CVE-2024-43135
Patch
CWE-22
High · CVSS 7.5
EPSS 1.7% (82th pct)2024-08-13
WordPress WPCafe plugin <= 2.2.27 - Local File Inclusion vulnerability
CVE-2024-37513
Patch
CWE-22
High · CVSS 8.5
EPSS 1.2% (80th pct)2024-07-09
WPCafe – Online Food Ordering, Restaurant Menu, Delivery, and Reservations for WooCommerce <= 2.2.25 - Authenticated (Contributor+) File inclusion via Shortcode
CVE-2024-5431
Patch
CWE-98
High · CVSS 8.8
EPSS 1.4% (81th pct)2024-06-25
WPCafe – Online Food Ordering, Restaurant Menu, Delivery, and Reservations for WooCommerce <= 2.2.24 - Authenticated (Contributor+) Stored Cross-Site Scripting via Reservation Form Shortcode
CVE-2024-5427
Patch
CWE-79
Medium · CVSS 6.4
EPSS 0.4% (58th pct)2024-05-31
WPCafe <= 2.2.23 - Unauthenticated Blind Server-Side Request Forgery
CVE-2024-1855
Patch
CWE-918
Medium · CVSS 5.3
EPSS 0.5% (64th pct)2024-05-23

Common weakness types

The CWE weakness categories most often found in themewinter wpcafe CVEs. Follow any weakness for its full explanation.

CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')2 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')1 CVE
CWE-862Missing Authorization1 CVE
CWE-918Server-Side Request Forgery (SSRF)1 CVE
CWE-98Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')1 CVE

Other themewinter products

Browse vulnerabilities for other products by themewinter.

All themewinter vulnerabilities

Frequently asked questions

Common questions about themewinter wpcafe vulnerabilities.

How many CVEs does themewinter wpcafe have?

themewinter wpcafe has 6 published CVE records since 2024.

How many themewinter wpcafe CVEs are in CISA KEV?

None of themewinter wpcafe's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Are there public exploits for themewinter wpcafe vulnerabilities?

No themewinter wpcafe CVEs currently have a tracked public exploit in this dataset.

Which versions of themewinter wpcafe are affected?

10 distinct themewinter wpcafe versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in themewinter wpcafe CVEs?

themewinter wpcafe's CVEs most often map to these CWE weakness types: CWE-22 (Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')), CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-862 (Missing Authorization), CWE-918 (Server-Side Request Forgery (SSRF)).

What is the average severity of themewinter wpcafe CVEs?

The average CVSS base score across themewinter wpcafe's scored CVEs is 7.0.

References

All themewinter vulnerabilities
The MITRE CVE Program (opens in a new tab)
Learn: What is a CVE?
CWE directory: the weakness types these CVEs map to

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track themewinter wpcafe vulnerabilities

Monitor new themewinter wpcafe vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing

On this page

Overview
Severity and exploitation
Affected versions and CVEs
Common weakness types
Other products
FAQ
References