Pricing
Case studies
Login
Start trial
WPCafe
Arraytics
Developer
3.0.23
Latest version
5,000
Installations
No date
Last updated
WordPress Plugin
Active VDP
Report vulnerability
Vulnerabilities
Security Policy
Security Contributors
Vulnerability history
0 present
16 patched
3 Mitigation rules
Unauthenticated Product Data Disclosure vulnerability
< 3.0.21
07/10/2026
Authenticated (Contributor+) Local File Inclusion vulnerability
<= 3.0.18
02/10/2026
Missing Authorization to Unauthenticated Arbitrary Email Notification Flow Read/Create/Update/Delete vulnerability
<= 3.0.19
02/10/2026
Unauthenticated Order Disclosure and Modification vulnerability
3.0.10-3.0.17
11/09/2026
Unauthenticated Reservation Approval Bypass vulnerability
< 3.0.18
26/08/2026
Missing Authorization to Authenticated (Subscriber+) Arbitrary Modification vulnerability
<= 3.0.14
09/07/2026
Broken Access Control vulnerability
<= 3.0.14
25/06/2026
Broken Access Control vulnerability
<= 3.0.7
12/03/2026
Local File Inclusion vulnerability
<= 2.2.32
17/04/2025
Local File Inclusion vulnerability
<= 2.2.31
27/03/2025
Local File Inclusion vulnerability
<= 2.2.28
07/08/2024
Local File Inclusion vulnerability
<= 2.2.27
05/07/2024
Authenticated (Contributor+) File inclusion via Shortcode vulnerability
<= 2.2.25
25/06/2024
Authenticated (Contributor+) Stored Cross-Site Scripting via Reservation Form Shortcode vulnerability
<= 2.2.24
31/05/2024
Unauthenticated Blind Server-Side Request Forgery vulnerability
<= 2.2.23
23/05/2024
Broken Access Control vulnerability
<= 2.2.22
15/11/2023